CVE-2013-10040 ClipBucket <= 2.6 ofc_upload_image.php Arbitrary File Upload RCE

Q: What is CVE-2013-10040?

CVE-2013-10040 is a critical vulnerability in ClipBucket, published on 31 Jul 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Q: Is CVE-2013-10040 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2013-10040 exists.

Q: How do I fix CVE-2013-10040?

No fix has been published for CVE-2013-10040 yet. Limit exposure of the affected software until one is available.

Critical 10.0 Published 31 Jul 2025 Updated 15 May 2026

Unauthenticated attackers can upload arbitrary PHP files to ClipBucket, leading to remote code execution via predictable file paths.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2013-10040?

CVE-2013-10040 is a critical vulnerability in ClipBucket, published on 31 Jul 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

ClipBucket version 2.6 and earlier contains a critical vulnerability in the ofc_upload_image.php script located at /admin_area/charts/ofc-library/. This endpoint allows unauthenticated users to upload arbitrary files, including executable PHP scripts. Once uploaded, the attacker can access the file via a predictable path and trigger remote code execution.

Weakness: CWE-434

Which versions are affected by CVE-2013-10040?

It affects 1 product.

Products include Clip-Bucket Clipbucket.

How do I fix CVE-2013-10040?

No fix has been published for CVE-2013-10040 yet. Limit exposure of the affected software until one is available.

Is CVE-2013-10040 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2013-10040 exists.

Public exploit code: 1 Metasploit module.

Sources

Also known as GHSA-99x8-h6hx-3fg9.