CVE-2012-10054 Umbraco CMS < 4.7.1 codeEditorSave.asmx RCE

Umbraco CMS versions prior to 4.7.1 are vulnerable to unauthenticated remote code execution via the codeEditorSave.asmx SOAP endpoint, which exposes a SaveDLRScript operation that permits arbitrary file uploads without authentication. By exploiting a path traversal flaw in the fileName parameter,...

PT-2025-33089 · Unknown · Umbraco Cms

Name of the Vulnerable Software and Affected Versions: Umbraco CMS versions prior to 4.7.1 Description: Umbraco CMS versions prior to 4.7.1 are susceptible to unauthenticated remote code execution through the codeEditorSave.asmx API endpoint. This endpoint exposes a SaveDLRScript operation that...

Umbraco codeEditorSave.asmx SaveDLRScript Operation Traversal File Upload Arbitrary Command Execution

The version of Umbraco installed on the remote host allows unauthenticated remote attackers to upload arbitrary files using the 'SaveDLRScript' SOAP action of the 'codeEditorSave.asmx' script. In addition, these files can be stored in a web-accessible location using encoded traversal strings. The...