CVE-2012-6274
Bigantsoft Bigant IM Message Server - Authentication Bypass
Title source: ruleDescription
BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers to create arbitrary files under AntServer\DocData\Public via unspecified vectors.
Exploits (2)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/24528
metasploit
WORKING POC
EXCELLENT
by Hamburgers Maccoy, juan vazquez · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/bigant_server_dupf_upload.rb
Scores
EPSS
0.7534
EPSS Percentile
98.9%
Classification
CWE
CWE-287
Status
draft
Affected Products (1)
bigantsoft/bigant_im_message_server
Timeline
Published
Feb 24, 2013
Tracked Since
Feb 18, 2026