CVE-2013-4793

https://notcve.org/view.php?id=CVE-2013-4793

27 Dec 2014 — The update function in umbraco.webservices/templates/templateService.cs in the TemplateService component in Umbraco CMS before 6.0.4 does not require authentication, which allows remote attackers to execute arbitrary ASP.NET code via a crafted SOAP request. La función update en umbraco.webservices/templates/templateService.cs en el componente TemplateService en Umbraco CMS anterior a 6.0.4 no requiere autenticación, lo que permite a atacantes remotos ejecutar código ASP.NET arbitrario a través de una petici... • https://labs.mwrinfosecurity.com/advisories/2013/11/29/umbraco-cms-templateservice-remote-code-execution • CWE-287: Improper Authentication •