Security Advisory

CVE-2013-10040

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-07-31 14:53:55

Last updated 2026-05-15 11:14:09

Assigner VulnCheck

CVSS score 10.0

State PUBLISHED

Description

ClipBucket version 2.6 and earlier contains a critical vulnerability in the ofc_upload_image.php script located at /admin_area/charts/ofc-library/. This endpoint allows unauthenticated users to upload arbitrary files, including executable PHP scripts. Once uploaded, the attacker can access the file via a predictable path and trigger remote code execution.

← Browse all CVEs View on cve.org ↗