CVE-2012-6498 Unrestricted file upload vulnerability in index.php in Atomymaxsite 2.5 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing i...
MediumCVSS 6.8
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unrestricted file upload vulnerability in index.php in Atomymaxsite 2.5 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file, as exploited in the wild in October 2012.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| maxtom atomymaxsite | <= 2.5 | No fix listed |
| maxtom atomymaxsite | = 1.50 | No fix listed |
| maxtom atomymaxsite | = 2.0 | No fix listed |