CVE-2012-10044 describes an arbitrary file creation vulnerability in MobileCartly version 1.0, specifically within the savepage.php script. This critical flaw allows unauthenticated attackers to create arbitrary files on the server by sending crafted HTTP GET requests, due to a lack of authentication and authorization checks. Successful exploitation can lead to remote code execution, as reflected by its CVSS score of 10.0. While not listed on the CISA KEV catalog, a Metasploit module exists for this vulnerability, and it has garnered significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| MobileCartly | MobileCartly | 1.0CNA affecteddefault unknown |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.