CVE-2013-1668

HIGH 8.5CVE-2013-1668 · Published 23/05/2014 · updated 16/06/2026

In short

CVE-2013-1668 is a HIGH (CVSS 8.5) vulnerability affecting coscms (coscms).
Chance of exploitation in the next 30 days (EPSS): 7.0%, higher than 94.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
coscms coscms	`= 1.3= 1.41≤ 1.721`	No fix yet

Description

The uploadFile function in upload/index.php in CosCMS before 1.822 allows remote administrators to execute arbitrary commands via shell metacharacters in the name of an uploaded file.

References

archives.neohapsis.com/archives/bugtraq/2013-03/0033.html
osvdb.org/90927
coscms.org/blog/view/4/Version-1.822
exploit-db.com/exploits/24629 · Exploit
securityfocus.com/bid/58332 · Exploit
diversen/gallery commit 7d58f87
htbridge.com/advisory/HTB23145

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free