CVE-2012-10056

🗓️ 13 Aug 2025 20:51:21Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 38 Views🌐 WEB

Auth users upload to mods/documents/uploads/; no type checks; PHP execution; default credentials.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2012-10056	29 May 201815:50	–	circl
CNNVD	Sourceforge PHP Volunteer Management 安全漏洞	13 Aug 202500:00	–	cnnvd
Cvelist	CVE-2012-10056 PHP Volunteer Management System 1.0.2 Arbitrary File Upload	13 Aug 202520:51	–	cvelist
EUVD	EUVD-2012-6603	7 Oct 202500:30	–	euvd
NVD	CVE-2012-10056	13 Aug 202521:15	–	nvd
Positive Technologies	PT-2025-33091 · Unknown · Php Volunteer Management System	13 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2012-10056	15 Aug 202521:29	–	redhatcve
Vulnrichment	CVE-2012-10056 PHP Volunteer Management System 1.0.2 Arbitrary File Upload	13 Aug 202520:51	–	vulnrichment

Vulners

CNA

Node

php_volunteer_management php_volunteer_managementMatch1.0.2

[
  {
    "defaultStatus": "unknown",
    "modules": [
      "mods/documents/uploads/"
    ],
    "product": "PHP Volunteer Management",
    "vendor": "PHP Volunteer Management",
    "versions": [
      {
        "status": "affected",
        "version": "1.0.2"
      }
    ]
  }
]

Source	Link
exploit-db	www.exploit-db.com/exploits/18957
exploit-db	www.exploit-db.com/exploits/18941
vulncheck	www.vulncheck.com/advisories/php-volunteer-management-system-arbitrary-file-upload
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/php_volunteer_upload_exec.rb
sourceforge	www.sourceforge.net/projects/phpvolunteer/

Parameter	Position	Path	Description	CWE
file	path	mods/documents/uploads/	Arbitrary file upload to publicly accessible directory leading to remote code execution via uploaded PHP payload.	CWE-434

15 Jul 2026 01:23Current

7.6High risk

Vulners AI Score7.6

CVSS 48.7

EPSS0.00996

SSVC

CWE-434