CVE-2012-10056

CVE-2012-10056 describes an arbitrary file upload vulnerability in PHP Volunteer Management System v1.0.2, allowing authenticated users to upload unrestricted file types to a publicly accessible directory. This flaw carries a high CVSS score of 8.7, indicating a low-complexity attack that can lead to complete compromise of confidentiality, integrity, and availability. Exploitation is trivial due to default credentials and the availability of a Metasploit module, enabling remote code execution via a malicious PHP payload. While not on the KEV catalog, its high EPSS score and significant community discussion suggest a high likelihood of exploitation.