CVE-2012-10062
HIGHXAMPP < 1.7.3 - Authenticated Remote Code Execution via WebDAV PHP Upload
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2012-10062.
PoCs published by Metasploit, theLightCosine, g0tmi1k, theLightCosine, including Metasploit module exploits/multi/http/webdav_upload_php.
AI-analyzed exploit summary This Metasploit module exploits weak WebDAV credentials on XAMPP servers to upload and execute a PHP payload. It uses HTTP Digest Authentication to upload a malicious PHP file via PUT request and then triggers execution via GET request.
Description
A vulnerability in XAMPP, developed by Apache Friends, version 1.7.3's default WebDAV configuration allows remote authenticated attackers to upload and execute arbitrary PHP code. The WebDAV service, accessible via /webdav/, accepts HTTP PUT requests using default credentials. This permits attackers to upload a malicious PHP payload and trigger its execution via a subsequent GET request, resulting in remote code execution on the server.
Exploits (3)
This Metasploit module exploits weak WebDAV credentials on XAMPP servers to upload and execute a PHP payload. It uses HTTP Digest Authentication to upload a malicious PHP file via PUT request and then triggers execution via GET request.
This Metasploit module exploits a WebDAV misconfiguration in XAMPP servers to upload and execute arbitrary PHP payloads. It leverages HTTP PUT requests to upload a malicious PHP file and then executes it via HTTP GET, achieving remote code execution.
This Metasploit module exploits weak WebDAV credentials in XAMPP servers to upload and execute a PHP payload. It uses HTTP PUT to upload the payload and then triggers execution via HTTP GET.
References (4)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N