CVE-2013-10055

published 2025-08-01

CVE-2013-10055: An unauthenticated arbitrary file upload vulnerability exists in Havalite CMS version 1.1.7 (and possibly earlier) in the upload.php script. The application…

Priority P2 73 critical 9.3 CVSS 4.0

AV N AC L AT N PR N UI N VC H VI H VA H SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

EXPLOIT

An unauthenticated arbitrary file upload vulnerability exists in Havalite CMS version 1.1.7 (and possibly earlier) in the upload.php script. The application fails to enforce proper file extension validation and authentication checks, allowing remote attackers to upload malicious PHP files via a crafted multipart/form-data POST request. Once uploaded, the attacker can access the file directly under havalite/tmp/files/, resulting in remote code execution.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
havalite_cms	havalite_cms	—	—

Detection & IOCs extracted from sources · hover to see the quote

url havalite/tmp/files/↗

path havalite/tmp/files/↗

path upload.php↗

• → Monitor for unauthenticated multipart/form-data POST requests to upload.php on Havalite CMS installations ↗
• → Alert on PHP file creation or access under the havalite/tmp/files/ directory, which is the webshell drop location ↗
• → Detect exploitation attempts via Metasploit module havalite_upload_exec targeting Havalite CMS 1.1.7 and prior ↗

• · The vulnerability affects Havalite CMS 1.1.7 and possibly earlier versions; the exact lower version boundary is unconfirmed ↗
• · No authentication is required to reach the vulnerable upload.php endpoint, meaning the attack surface is fully exposed on any internet-facing Havalite instance ↗

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-434