{"vulnerability": "cve-2012-1004", "sightings": [{"uuid": "dd4be4a1-59bc-43b9-bfdc-463930e7fa37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10043", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:56.000000Z"}, {"uuid": "5cb07f6a-f572-494a-a4bc-2909f03b8de3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10040", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:56.000000Z"}, {"uuid": "5450f965-0eef-4db4-afc9-d668926e2f9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10041", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:56.000000Z"}, {"uuid": "a7524071-cfe6-421e-911b-58893349f2a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10042", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:56.000000Z"}, {"uuid": "7540c4dc-3ab4-4b6a-9521-f03723bf4265", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10044", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:56.000000Z"}, {"uuid": "86649715-0f9b-48fa-8cf5-2b0c0a05b85f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10045", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:56.000000Z"}, {"uuid": "b8717ad5-df7b-4034-81d9-a1659855ae8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10046", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:56.000000Z"}, {"uuid": "903796fe-52f1-4f2d-8441-a2fc358c5254", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10047", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:56.000000Z"}, {"uuid": "202df374-193b-4ab0-9ff8-cc02a3e767ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10048", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:56.000000Z"}, {"uuid": "cb58791e-7e23-47fe-99b4-f78cc513f43a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10049", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:56.000000Z"}, {"uuid": "b8aa9def-d04f-4975-8dfe-186eb848274d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10041", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvvzxfwo552p", "content": "", "creation_timestamp": "2025-08-08T19:57:11.447352Z"}, {"uuid": "24c668d9-8621-46ec-aa49-a4bfc574b5a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10043", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvw2aexqa62s", "content": "", "creation_timestamp": "2025-08-08T20:02:12.800386Z"}, {"uuid": "6bb8e6c1-ca84-42a0-8b74-c98e96891bff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10048", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvw2scdza22p", "content": "", "creation_timestamp": "2025-08-08T20:12:13.662610Z"}, {"uuid": "a9ccc668-b39a-4ed5-bc1b-b6c9ebaf6abd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10046", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lvw3cmdij32u", "content": "", "creation_timestamp": "2025-08-08T20:21:21.072861Z"}, {"uuid": "af48a069-36f0-4544-aadc-ccbd2053acfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10042", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lvw4sutpyg25", "content": "", "creation_timestamp": "2025-08-08T20:48:20.745695Z"}, {"uuid": "5fcc576d-b296-433c-b023-afde889c4baf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10041", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lvwhwnvujm2c", "content": "", "creation_timestamp": "2025-08-09T00:07:18.815460Z"}, {"uuid": "88deeaa1-832f-4302-9a95-fac575f681b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10040", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/openfiler_networkcard_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "14053132-e090-4c08-ab71-acf862c747ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10042", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/sflog_upload_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "e00b508c-411e-4692-9d43-1cae4319198a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10046", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/esva_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "c13bda19-6d08-4ce6-b1a1-29edc452cc57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10041", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/wanem_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "584b5279-9890-4ac9-89dd-c78d1f601b39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10048", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/zenoss_showdaemonxmlconfig_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "6cbd021e-bb7a-4256-b3ab-17801f103b4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10044", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/mobilecartly_upload_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "44ab236c-f489-40f0-94b4-435caf989409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10049", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/webpagetest_upload_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "f1a15ef4-e4bf-4c83-9c33-3a23d32c127c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10043", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/actfax_import_users_bof.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "c6ef62f2-4bda-4d17-8a0e-89ad4875b618", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10047", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/cyclope_ess_sqli.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "ea1060b2-9e02-4561-b2c7-99d30b278151", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10045", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/xoda_file_upload.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "2499772b-32a9-47b1-b172-9c9b5f8d2321", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10046", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/esva_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"iJoo\", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a command injection vulnerability found in E-Mail Security\\n          Virtual Appliance. This module abuses the learn-msg.cgi file to execute arbitrary\\n          OS commands without authentication. This module has been successfully tested on the\\n          ESVA_2057 appliance.\", \"disclosure_date\": \"2012-08-16\", \"fullname\": \"exploit/linux/http/esva_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:54:55 +0000\", \"name\": \"E-Mail Security Virtual Appliance learn-msg.cgi Command Injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/esva_exec.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/esva_exec\", \"references\": [\"CVE-2012-10046\", \"OSVDB-85462\", \"BID-55050\", \"EDB-20551\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"ESVA_2057\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:32.483618Z"}, {"uuid": "e896bf4b-a1c9-4bf1-814c-368e93236ce5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10040", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/openfiler_networkcard_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"bcoles \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a vulnerability in Openfiler v2.x\\n          which could be abused to allow authenticated users to execute arbitrary\\n          code under the context of the 'openfiler' user. The 'system.html' file\\n          uses user controlled data from the 'device' parameter to create a new\\n          'NetworkCard' object. The class constructor in 'network.inc' calls exec()\\n          with the supplied data. The 'openfiler' user may 'sudo /bin/bash' without\\n          providing a system password.\", \"disclosure_date\": \"2012-09-04\", \"fullname\": \"exploit/linux/http/openfiler_networkcard_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:55:15 +0000\", \"name\": \"Openfiler v2.x NetworkCard Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/openfiler_networkcard_exec.rb\", \"platform\": \"Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/openfiler_networkcard_exec\", \"references\": [\"CVE-2012-10040\", \"BID-55490\", \"URL-http://web.archive.org/web/20210922060411/https://itsecuritysolutions.org/2012-09-06-Openfiler-v2.x-multiple-vulnerabilities/\", \"OSVDB-93881\", \"EDB-21191\"], \"rport\": 446, \"session_types\": false, \"targets\": [\"Automatic Targeting\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:49.284265Z"}, {"uuid": "6c2b1a88-dca7-4b74-bbb4-94898a72e55c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10048", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/zenoss_showdaemonxmlconfig_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"bcoles \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a command execution vulnerability in Zenoss 3.x\\n          which could be abused to allow authenticated users to execute arbitrary\\n          code under the context of the 'zenoss' user. The show_daemon_xml_configs()\\n          function in the 'ZenossInfo.py' script calls Popen() with user\\n          controlled data from the 'daemon' parameter.\", \"disclosure_date\": \"2012-07-30\", \"fullname\": \"exploit/linux/http/zenoss_showdaemonxmlconfig_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 13:20:20 +0000\", \"name\": \"Zenoss 3 showDaemonXMLConfig Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/zenoss_showdaemonxmlconfig_exec.rb\", \"platform\": \"Unix\", \"post_auth\": true, \"rank\": 400, \"ref_name\": \"linux/http/zenoss_showdaemonxmlconfig_exec\", \"references\": [\"CVE-2012-10048\", \"URL-http://web.archive.org/web/20221203180334/https://itsecuritysolutions.org/2012-07-30-zenoss-3.2.1-multiple-security-vulnerabilities/\", \"OSVDB-84408\"], \"rport\": 8080, \"session_types\": false, \"targets\": [\"Automatic Targeting\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:04.162547Z"}, {"uuid": "aa35210a-70bc-40d2-84e3-be8f9c501c96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10041", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/wanem_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"bcoles \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a command execution vulnerability in WAN Emulator\\n          version 2.3 which can be abused to allow unauthenticated users to execute\\n          arbitrary commands under the context of the 'www-data' user.\\n          The 'result.php' script calls shell_exec() with user controlled data\\n          from the 'pc' parameter. This module also exploits a command execution\\n          vulnerability to gain root privileges. The 'dosu' binary is suid 'root'\\n          and vulnerable to command execution in argument one.\", \"disclosure_date\": \"2012-08-12\", \"fullname\": \"exploit/linux/http/wanem_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:55:15 +0000\", \"name\": \"WAN Emulator v2.3 Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/wanem_exec.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/wanem_exec\", \"references\": [\"CVE-2012-10041\", \"OSVDB-85344\", \"OSVDB-85345\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic Targeting\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:02.223146Z"}, {"uuid": "b8136b59-a38f-4fb0-9dad-87f0912d939a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10044", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/mobilecartly_upload_exec.rb", "content": "{\"aliases\": [], \"arch\": \"php, x86\", \"author\": [\"Yakir Wizman \", \"sinn3r \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a vulnerability in MobileCartly.  The savepage.php file\\n          does not do any permission checks before using file_put_contents(), which\\n          allows any user to have direct control of that function to create files\\n          under the 'pages' directory by default, or anywhere else as long as the user\\n          has WRITE permission.\", \"disclosure_date\": \"2012-08-10\", \"fullname\": \"exploit/multi/http/mobilecartly_upload_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:57:58 +0000\", \"name\": \"MobileCartly 1.0 Arbitrary File Creation Vulnerability\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/mobilecartly_upload_exec.rb\", \"platform\": \"Linux,PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/mobilecartly_upload_exec\", \"references\": [\"CVE-2012-10044\", \"OSVDB-85509\", \"EDB-20422\", \"BID-55399\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Generic (PHP Payload)\", \"Linux x86\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:03.153699Z"}, {"uuid": "1916a44b-cb0b-464d-bd45-4043bed89c99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10042", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/sflog_upload_exec.rb", "content": "{\"aliases\": [], \"arch\": \"php, x86\", \"author\": [\"dun\", \"sinn3r \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits multiple design flaws in Sflog 1.0.  By default, the CMS has\\n          a default admin credential of \\\"admin:secret\\\", which can be abused to access\\n          administrative features such as blogs management.  Through the management\\n          interface, we can upload a backdoor that's accessible by any remote user, and then\\n          gain arbitrary code execution.\", \"disclosure_date\": \"2012-07-06\", \"fullname\": \"exploit/multi/http/sflog_upload_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:04 +0000\", \"name\": \"Sflog! CMS 1.0 Arbitrary File Upload Vulnerability\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/sflog_upload_exec.rb\", \"platform\": \"Linux,PHP\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/sflog_upload_exec\", \"references\": [\"CVE-2012-10042\", \"OSVDB-83767\", \"EDB-19626\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Generic (PHP Payload)\", \"Linux x86\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:11.391920Z"}, {"uuid": "a42780cf-3ac2-4253-82f1-298042014b30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10049", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/webpagetest_upload_exec.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"dun\", \"sinn3r \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in WebPageTest's Upload Feature. By\\n          default, the resultimage.php file does not verify the user-supplied item before\\n          saving it to disk, and then places this item in the web directory accessible by\\n          remote users.  This flaw can be abused to gain remote code execution.\", \"disclosure_date\": \"2012-07-13\", \"fullname\": \"exploit/multi/http/webpagetest_upload_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:04 +0000\", \"name\": \"WebPageTest Arbitrary PHP File Upload\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/webpagetest_upload_exec.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/webpagetest_upload_exec\", \"references\": [\"CVE-2012-10049\", \"OSVDB-83822\", \"EDB-19790\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"WebPageTest v2.6 or older\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:19.996824Z"}, {"uuid": "ac0b9fe4-a0c2-47b6-9a7a-e8fe3d3ce72a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10045", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/xoda_file_upload.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Shai rod\", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a file upload vulnerability found in XODA 0.4.5. Attackers\\n          can abuse the \\\"upload\\\" command in order to upload a malicious PHP file without any\\n          authentication, which results in arbitrary code execution. The module has been\\n          tested successfully on XODA 0.4.5 and Ubuntu 10.04.\", \"disclosure_date\": \"2012-08-21\", \"fullname\": \"exploit/unix/webapp/xoda_file_upload\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:12 +0000\", \"name\": \"XODA 0.4.5 Arbitrary PHP File Upload Vulnerability\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/xoda_file_upload.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/webapp/xoda_file_upload\", \"references\": [\"CVE-2012-10045\", \"OSVDB-85117\", \"BID-55127\", \"EDB-20703\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"XODA 0.4.5\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:52.593268Z"}, {"uuid": "459c9e92-0ee5-4876-a212-d37aebd04b20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10043", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/actfax_import_users_bof.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Craig Freyman\", \"Brandon Perry\", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability in ActiveFax Server. The vulnerability is\\n          a stack based buffer overflow in the \\\"Import Users from File\\\" function, due to the\\n          insecure usage of strcpy while parsing the csv formatted file. The module creates a\\n          .exp file that must be imported with ActiveFax Server. It must be imported with the\\n          default character set 'ECMA-94 / Latin 1 (ISO 8859)'. The module has been tested\\n          successfully on ActFax Server 4.32 over Windows XP SP3 and Windows 7 SP1. In the\\n          Windows XP case, when ActFax runs as a service, it will execute as SYSTEM.\", \"disclosure_date\": \"2012-08-28\", \"fullname\": \"exploit/windows/fileformat/actfax_import_users_bof\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"ActiveFax (ActFax) 4.3 Client Importer Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/fileformat/actfax_import_users_bof.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/fileformat/actfax_import_users_bof\", \"references\": [\"CVE-2012-10043\", \"OSVDB-85175\", \"EDB-20915\", \"URL-http://www.pwnag3.com/2012/08/actfax-local-privilege-escalation.html\"], \"rport\": null, \"session_types\": false, \"targets\": [\"ActFax 4.32 / Windows XP SP3 EN / Windows 7 SP1\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:19.056029Z"}, {"uuid": "3cc431f8-96e4-46b6-85db-c55149ce442e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10047", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/cyclope_ess_sqli.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"loneferret\", \"sinn3r \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a SQL injection found in Cyclope Employee Surveillance\\n          Solution.  Because the login script does not properly handle the user-supplied\\n          username parameter, a malicious user can manipulate the SQL query, and allows\\n          arbitrary code execution under the context of 'SYSTEM'.\", \"disclosure_date\": \"2012-08-08\", \"fullname\": \"exploit/windows/http/cyclope_ess_sqli\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:31 +0000\", \"name\": \"Cyclope Employee Surveillance Solution v6 SQL Injection\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/http/cyclope_ess_sqli.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/http/cyclope_ess_sqli\", \"references\": [\"CVE-2012-10047\", \"OSVDB-84517\", \"EDB-20393\"], \"rport\": 7879, \"session_types\": false, \"targets\": [\"Cyclope Employee Surveillance Solution v6.2 or older\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:43.962350Z"}]}