PT-2025-31991 · Glossword · Glossword

Published 2025-08-05 · Updated 2025-08-05 · CVE-2013-10067

Positive Technologies (AI Summary)

CVSS v4.0

9.4

Critical

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Glossword versions 1.8.8 through 1.8.12

Description Glossword versions 1.8.8 through 1.8.12 contain an authenticated arbitrary file upload vulnerability. When deployed as a standalone application, the administrative interface (gw admin.php) allows users with administrator privileges to upload files to the gw temp/a/ directory. Insufficient validation of file type and path allows attackers to upload and execute PHP payloads, resulting in remote code execution.

Recommendations Versions prior to 1.8.8 should be used. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2013-10067

Affected Products

Glossword

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2013-10067 · Security Note
• https://github.com/glosswordteam/Glossword · Note
• https://sourceforge.net/projects/glossword · Note
• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/glossword_upload_exec.rb · Note
• https://exploit-db.com/exploits/24456 · Note
• https://t.me/CVEtracker/29245 · Telegram Post
• https://vulncheck.com/advisories/glossword-arbitrary-file-upload-rce · Note
• https://exploit-db.com/exploits/24548 · Note