CVE-2012-6498

Unrestricted file upload vulnerability in index.php in Atomymaxsite 2.5 and earlier allows remote attackers to execute arbitrary code by uploading...

Basic Information

CVE State
PUBLISHED
Reserved Date
January 08, 2013
Published Date
January 08, 2013
Last Updated
September 16, 2024
Vendor
Atomymaxsite
Product
Atomymaxsite
Description
Unrestricted file upload vulnerability in index.php in Atomymaxsite 2.5 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file, as exploited in the wild in October 2012.
Tags
php

CVSS Scores

CVSS v2.0

6.8

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploit Status

Exploited in the Wild
Yes (2013-01-08 15:00:00 UTC) Source

Known Exploited Vulnerability Information

Source Added Date
CVE 2013-01-08 15:00:00 UTC

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Added to KEVIntel