CVE-2013-4793 in CMS

Summary

The update function in umbraco.webservices/templates/templateService.cs in the TemplateService component in Umbraco CMS before 6.0.4 does not require authentication, which allows remote attackers to execute arbitrary ASP.NET code via a crafted SOAP request.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservation

07/12/2013

Disclosure

12/27/2014

Moderation

VulDB entry created

Entries

1

CPE

ready

CWE

CWE-287

CVSS

7.3

EPSS

0.00395

CTI

0.00

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-4793
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-4793
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-4793/