Critical severity9.8NVD Advisory· Published Aug 13, 2025· Updated Jun 16, 2026
CVE-2012-10054
CVE-2012-10054
Description
Umbraco CMS versions prior to 4.7.1 are vulnerable to unauthenticated remote code execution via the codeEditorSave.asmx SOAP endpoint, which exposes a SaveDLRScript operation that permits arbitrary file uploads without authentication. By exploiting a path traversal flaw in the fileName parameter, attackers can write malicious ASPX scripts directly into the web-accessible /umbraco/ directory and execute them remotely.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:umbraco:umbraco_cms:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:umbraco:umbraco_cms:*:*:*:*:*:*:*:*range: <4.7.1
- (no CPE)range: <4.7.1
- Umbraco/CMSv5Range: *
Patches
Vulnerability mechanics
References
5- web.archive.org/web/20111017174609/http://umbraco.codeplex.com/releases/view/73692nvdPatchThird Party Advisory
- web.archive.org/web/20120707033729/http://blog.gdssecurity.com/labs/2012/7/3/find-bugs-faster-with-a-webmatrix-local-reference-instance.htmlnvdPatch
- raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/umbraco_upload_aspx.rbnvdExploit
- www.exploit-db.com/exploits/19671nvdExploit
- www.vulncheck.com/advisories/umbraco-cms-rcenvdThird Party Advisory
News mentions
0No linked articles in our index yet.