A vulnerability classified as critical has been found in Kordil EDMS 2.2.60rc3. This affects an unknown part of the file users_add.php. The manipulation leads to unrestricted upload. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is uniquely identified as CVE-2013-10066. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.