{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-02T17:25:38.508","vulnerabilities":[{"cve":{"id":"CVE-2010-1514","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2010-06-15T14:30:01.127","lastModified":"2026-06-16T23:18:32.183","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in TomatoCMS 2.0.6 and earlier allows remote authenticated users, with certain privileges, to execute arbitrary PHP code by uploading an image file, and then accessing it via a direct request to the file in an unspecified directory."},{"lang":"es","value":"Vulnerabilidad de subida de archivos sin restricciones en TomatoCMS v2.0.6 y anteriores permite a usuarios remotos autenticados, con ciertos privilegios, ejecutar código PHP de su elección mediante la subida de un archivo de imagen y el posterior acceso al mismo, a través de una solicitud directa al archivo en un directorio especificado."}],"affected":[{"source":"PSIRT-CNA@flexerasoftware.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","baseScore":6.0,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tomatocms:tomatocms:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.6","matchCriteriaId":"0A3B2955-342C-49B4-915D-EDBDB966C62F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tomatocms:tomatocms:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C22F58CF-182C-459F-9935-B3A729413160"},{"vulnerable":true,"criteria":"cpe:2.3:a:tomatocms:tomatocms:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E018B4F5-A3A6-4D0F-BD89-59743A38BEF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:tomatocms:tomatocms:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FB0D9BD7-3C4A-478D-B378-E7E7E8014C3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tomatocms:tomatocms:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9EDC1737-FD83-40FF-A3AB-D4FFF524B8C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:tomatocms:tomatocms:2.0.3.1430:*:*:*:*:*:*:*","matchCriteriaId":"FFA24A70-6715-48EF-9D3E-51EFC3DD8CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tomatocms:tomatocms:2.0.3.1622:*:*:*:*:*:*:*","matchCriteriaId":"1C8D5050-CC12-423C-A1A0-8410B2818D24"},{"vulnerable":true,"criteria":"cpe:2.3:a:tomatocms:tomatocms:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"53B3A38E-B871-4A1A-A52C-FF42222302CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:tomatocms:tomatocms:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58E5EFB3-4FA4-46AE-A948-7606DD7DDE44"}]}]}],"references":[{"url":"http://holisticinfosec.org/content/view/148/45/","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/39680","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2010-57/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/40544","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://holisticinfosec.org/content/view/148/45/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2010-57/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/40544","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}