CVE-2012-10042
HIGHSflog! CMS 1.0 - Authenticated Arbitrary File Upload via Blog Management Interface
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-10042.
PoCs published by dun, dun, sinn3r, including Metasploit module exploits/multi/http/sflog_upload_exec.
AI-analyzed exploit summary This exploit demonstrates multiple vulnerabilities in sflog! CMS/Blog system, including Local File Inclusion (LFI), admin password disclosure, and arbitrary file upload. The PoC provides clear examples of how to exploit these vulnerabilities with specific HTTP requests and file paths.
Description
Sflog! CMS 1.0 contains an authenticated arbitrary file upload vulnerability in the blog management interface. The application ships with default credentials (admin:secret) and allows authenticated users to upload files via manage.php. The upload mechanism fails to validate file types, enabling attackers to upload a PHP backdoor into a web-accessible directory (blogs/download/uploads/). Once uploaded, the file can be executed remotely, resulting in full remote code execution.
Exploits (2)
This exploit demonstrates multiple vulnerabilities in sflog! CMS/Blog system, including Local File Inclusion (LFI), admin password disclosure, and arbitrary file upload. The PoC provides clear examples of how to exploit these vulnerabilities with specific HTTP requests and file paths.
This Metasploit module exploits an arbitrary file upload vulnerability in Sflog! CMS 1.0 by leveraging default admin credentials to upload a malicious PHP payload, achieving remote code execution.
References (4)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N