CVE-2013-10067

published 2025-08-05

CVE-2013-10067: Glossword versions 1.8.8 through 1.8.12 contain an authenticated arbitrary file upload vulnerability. When deployed as a standalone application, the…

Priority P2 64 critical 9.4 CVSS 4.0

AV N AC L AT N PR H UI N VC H VI H VA H SC H SI H SA H E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

EXPLOIT

Glossword versions 1.8.8 through 1.8.12 contain an authenticated arbitrary file upload vulnerability. When deployed as a standalone application, the administrative interface (gw_admin.php) allows users with administrator privileges to upload files to the gw_temp/a/ directory. Due to insufficient validation of file type and path, attackers can upload and execute PHP payloads, resulting in remote code execution.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
glossword_team	glossword	1.8.8 – 1.8.12	—

Detection & IOCs extracted from sources · hover to see the quote

path gw_temp/a/↗

path gw_admin.php↗

• → Monitor for PHP file uploads to the gw_temp/a/ directory, which is the target drop location for malicious payloads in this exploit ↗
• → Alert on POST requests to gw_admin.php that include file upload content, particularly from authenticated administrator sessions, as this is the vulnerable endpoint ↗

• · This vulnerability is only exploitable when Glossword is deployed as a standalone application; deployments integrated into other frameworks may not be affected ↗
• · Exploitation requires valid administrator credentials; unauthenticated attackers cannot directly trigger the upload functionality ↗
• · Affected versions are strictly 1.8.8 through 1.8.12; versions outside this range are not confirmed vulnerable ↗

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-434