EUVD-2012-6600

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Umbraco before 4.7.1 allows unauthenticated remote code execution via codeEditorSave.asmx; path traversal in fileName uploads ASPX to /umbraco/.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2012-10054	13 Aug 202520:54	–	attackerkb
Circl	CVE-2012-10054	29 May 201815:50	–	circl
CNNVD	Umbraco CMS 安全漏洞	13 Aug 202500:00	–	cnnvd
CVE	CVE-2012-10054	13 Aug 202520:54	–	cve
Cvelist	CVE-2012-10054 Umbraco CMS < 4.7.1 codeEditorSave.asmx RCE	13 Aug 202520:54	–	cvelist
NVD	CVE-2012-10054	13 Aug 202521:15	–	nvd
Positive Technologies	PT-2025-33089 · Unknown · Umbraco Cms	13 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2012-10054	15 Aug 202521:29	–	redhatcve
Vulnrichment	CVE-2012-10054 Umbraco CMS < 4.7.1 codeEditorSave.asmx RCE	13 Aug 202520:54	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "1b11ea79-15e0-30c4-985d-2a826d642bf2",
        "vendor": {
          "name": "umbraco"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "68eaf50a-f362-338c-a1c5-95fb8efb96ed",
        "product": {
          "name": "CMS"
        },
        "product_version": "* <4.7.1"
      }
    ]
  }
]

Source	Link
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/umbraco_upload_aspx.rb
exploit-db	www.exploit-db.com/exploits/19671
web	www.web.archive.org/web/20120707033729/http://blog.gdssecurity.com/labs/2012/7/3/find-bugs-faster-with-a-webmatrix-local-reference-instance.html
github	www.github.com/umbraco/Umbraco-CMS
web	www.web.archive.org/web/20111017174609/http://umbraco.codeplex.com/releases/view/73692
vulncheck	www.vulncheck.com/advisories/umbraco-cms-rce
nvd	www.nvd.nist.gov/vuln/detail/CVE-2012-10054
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.4Medium risk

Vulners AI Score6.4

CVSS 49.3

CVSS 3.19.8

EPSS0.75944

SSVC