CVE-2012-10061

🗓️ 20 Aug 2025 15:39:57Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 34 Views🌐 WEB

Sockso <=1.5 path traversal via HTTP 4444 /file/ allows unauthenticated access to arbitrary files.

Reporter	Title	Published	Views	Family All 12
attackerkb	CVE-2012-10061	20 Aug 202515:39	–	attackerkb
Circl	CVE-2012-10061	29 May 201815:50	–	circl
CNNVD	Sockso Music Host Server 安全漏洞	20 Aug 202500:00	–	cnnvd
Cvelist	CVE-2012-10061 Sockso Music Host Server <= 1.5 Path Traversal	20 Aug 202515:39	–	cvelist
EUVD	EUVD-2012-6607	7 Oct 202500:30	–	euvd
Metasploit	Sockso Music Host Server 1.5 Directory Traversal	14 Mar 201200:00	–	metasploit
NVD	CVE-2012-10061	20 Aug 202516:15	–	nvd
OpenVAS	Sockso < 1.5.1 Directory Traversal Vulnerability - Active Check	16 Mar 201200:00	–	openvas
Positive Technologies	PT-2025-34112 · Undefined · Undefined	20 Aug 202500:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2012-10061: Improper Limitation of a Pathname to a Restricted Directory	20 Aug 202500:00	–	rapid7

Vulners

CNA

Node

sockso_project music_host_serverRange0–1.5

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "HTTP file handler (file/)"
    ],
    "product": "Music Host Server",
    "vendor": "Sockso Project",
    "versions": [
      {
        "lessThanOrEqual": "1.5",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
github	www.github.com/rodnaph/sockso
web	www.web.archive.org/web/20120326095835/http://sockso.pu-gh.com/
exploit-db	www.exploit-db.com/exploits/18605
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/sockso_traversal.rb
vulncheck	www.vulncheck.com/advisories/sockso-music-host-server-path-traversal
aluigi	www.aluigi.altervista.org/adv/sockso_1-adv.txt

Parameter	Position	Path	Description	CWE
FILEPATH	path	/file/../../../../../../../../../../windows\\system.ini	Directory traversal via /file/ endpoint to retrieve arbitrary files (CVE-2012-10061).	CWE-22

16 Jun 2026 23:38Current

6.7Medium risk

Vulners AI Score6.7

CVSS 48.7

EPSS0.01249

SSVC

CWE-22