cbcvebase.

Kordil Edms vulnerabilities

1 known vulnerability affecting kordil/edms.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2013-10066P2CRITICALCVSS 10.0PoCv2.2.60rc32025-08-05
CVE-2013-10066 [CRITICAL] CWE-434 CVE-2013-10066: An unauthenticated arbitrary file upload vulnerability exists in Kordil EDMS v2.2.60rc3. The applica An unauthenticated arbitrary file upload vulnerability exists in Kordil EDMS v2.2.60rc3. The application exposes an upload endpoint (users_add.php) that allows attackers to upload files to the /userpictures/ directory without authentication. This flaw enables remote code execution by uploading a PHP payload and invoking it via a direct HTTP reques
nvd
Kordil Edms vulnerabilities | cvebase