cbcvebase.

Librettocms vulnerabilities

1 known vulnerability affecting librettocms/librettocms.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2013-10054P2CRITICALCVSS 9.3PoCv1.1.72025-08-04
CVE-2013-10054 [CRITICAL] CWE-434 CVE-2013-10054: An unauthenticated arbitrary file upload vulnerability exists in LibrettoCMS version 1.1.7 (and poss An unauthenticated arbitrary file upload vulnerability exists in LibrettoCMS version 1.1.7 (and possibly earlier) contains an unauthenticated arbitrary file upload vulnerability in its File Manager plugin. The upload handler located at adm/ui/js/ckeditor/plugins/pgrfilemanager/php/upload.php fails to properly validate file extensions, allowing att
nvd