CVE-2014-10074(umbraco / umbraco_cms)

LOWCVSS 9.8 · CRITICAL

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Umbraco before 7.2.0 has a remote PHP code execution vulnerability because Umbraco.Web.UI/config/umbracoSettings.Release.config does not block the upload of .php files.

umbraco CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

Exploit / PoC references

Weakness type (CWE)

CWE-434

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

umbraco_cms

Affected systems

Vendors

umbraco

Products

umbraco_cms

Deep dive

Full discourse1 post

Manish Kyal@manishkyal18h
Remote PHP Code Execution via File Upload - CVE-2014-10074 https://youtube.com/shorts/jOoa5VNjXlw?si=VHrSOHvbixjVuUR9 via @YouTube
0000052
103 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	umbraco	umbraco_cms	-	-	-

Explore more

Back to dashboard umbraco CVEs umbraco_cms vulnerabilities