CVE-2012-1153

CVE-2012-1153 describes an unrestricted file upload vulnerability in appRain CMF versions 0.1.5 and earlier, specifically within the addons/uploadify/uploadify.php component. This vulnerability allows remote attackers to execute arbitrary code by uploading files with executable extensions and then directly accessing them in the uploads directory. With a CVSS score of 6.8, it presents a medium severity risk due to its network-based attack vector, medium access complexity, and potential for partial compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, exploit code is publicly available through Metasploit and ExploitDB, indicating a clear path for exploitation. Despite the availability of exploits, there is no evidence of active exploitation, and it has received minimal community discussion or media coverage.