MobileCartly 1.0 savepage.php Arbitrary File Creation

Advisories

severity: critical
date: August 8, 2025
Affecting: MobileCartly 1.0
Affected version range is undefined
CVE: CVE-2012-10044
CVE type: Unrestricted File Upload
CVSS: 10
CVSS V4 Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
References: Metasploit Module
EDB-20422
EDB-21079 (Metasploit)
Archived Product Site
Credit: Yakir Wizman