CVE-2013-10040
BaseFortify
Publication date: 2025-07-31
Last updated on: 2025-09-23
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| clip-bucket | clipbucket | to 2.6 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-434 | The product allows the upload or transfer of dangerous file types that are automatically processed within its environment. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in ClipBucket version 2.6 and earlier in the ofc_upload_image.php script. It allows unauthenticated users to upload arbitrary files, including executable PHP scripts, to the server. Because the uploaded files are accessible via a predictable path, an attacker can execute remote code on the server by accessing the uploaded malicious script.
How can this vulnerability impact me? :
The vulnerability can lead to remote code execution on the affected server, allowing an attacker to run arbitrary code with potentially full control over the system. This can result in data theft, server compromise, defacement, or use of the server for malicious activities.