Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.2
CVE-2025-29093: Motivian Content Management System v.41.0.0 allows remote code execution via image upload
CVE-2025-29093 · published 1 year ago
Summary
A security issue in Motivian Content Management System v.41.0.0 allows an attacker to upload a malicious image that can execute unauthorized code on the server. This could allow an attacker to take control of the server or steal sensitive data. Update to the latest version of the software to fix this issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| motivian | content_management_system |
41.0.0 cpe:2.3:a:motivian:content_management_system:41.0.0:*:*:*:*:*:*:* |
Original advisory text
File Upload vulnerability in Motivian Content Mangment System v.41.0.0 allows a remote attacker to execute arbitrary code via the Content/Gallery/Images component.
File Upload vulnerability in Motivian Content Mangment System v.41.0.0 allows a remote attacker to execute arbitrary code via the Content/Gallery/Images component.
References
- https://github.com/FraMarcuccio/CVE-2025-29093-Arbitrary-File-Upload/blob/main/R... Exploit Third Party Advisory
- https://www.linkedin.com/in/francesco-marcuccio-0433b9218 Not Applicable
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Type
CWE-434Unrestricted File Upload
Timeline
Published4 Jun 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-29093 · NVD
Track software like this
Free during beta