cbcvebase.
CVE-2013-4898
published 2014-01-29

CVE-2013-4898: Unrestricted file upload vulnerability in the user profile page feature in the Timeline Plugin 4.2.5p9 for SocialEngine allows remote authenticated users to…

PriorityP342medium6.5CVSS 2.0
AVNACLAuSCPIPAP
EXPLOIT
EPSS
3.22%
86.6th percentile
Unrestricted file upload vulnerability in the user profile page feature in the Timeline Plugin 4.2.5p9 for SocialEngine allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in public/temporary/timeline/.

Affected

1 ranges
VendorProductVersion rangeFixed in
webhivetimeline——
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.