{"vulnerability": "CVE-2012-6710", "sightings": [{"uuid": "c970958b-0202-473d-be6d-f8bee91ca8b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-6710", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "95c1ffb7-2b66-4f02-a5a2-a4c82182ef1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-6710", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/extplorer_upload_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "0b5873ad-d460-4085-8071-aa1a727d1240", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-6710", "type": "seen", "source": "https://t.me/cibsecurity/557", "content": "ATENTION\u203c New - CVE-2012-6710\n\next_find_user in eXtplorer through 2.1.2 allows remote attackers to bypass authentication via a password[]= (aka an empty array) in an action=login request to index.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2018-10-07T22:25:55.000000Z"}, {"uuid": "fbe58aa4-0ec7-448c-a5e6-53fe09cbc527", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-6710", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/extplorer_upload_exec.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"bcoles \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an authentication bypass vulnerability in eXtplorer\\n          versions 2.1.0 to 2.1.2 and 2.1.0RC5 when run as a standalone application.\\n          This application has an upload feature that allows an authenticated user\\n          with administrator roles to upload arbitrary files to any writable\\n          directory in the web root. This module uses an authentication bypass\\n          vulnerability to upload and execute a file.\", \"disclosure_date\": \"2012-12-31\", \"fullname\": \"exploit/multi/http/extplorer_upload_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:57:58 +0000\", \"name\": \"eXtplorer v2.1 Arbitrary File Upload Vulnerability\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/extplorer_upload_exec.rb\", \"platform\": \"PHP\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/extplorer_upload_exec\", \"references\": [\"CVE-2012-6710\", \"OSVDB-88751\", \"BID-57058\", \"URL-http://web.archive.org/web/20230128023508/https://itsecuritysolutions.org/2012-12-31-eXtplorer-v2.1-authentication-bypass-vulnerability/\", \"URL-http://extplorer.net/issues/105\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic Targeting\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:46.593607Z"}]}