EUVD-2012-6590

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

CuteFlow <=2.11.2 vuln: restart script allows unauthenticated PHP uploads arbitrary dir enabling RCE

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2012-10050	8 Aug 202518:10	–	attackerkb
Circl	CVE-2012-10050	29 May 201815:50	–	circl
CNNVD	CuteFlow 安全漏洞	8 Aug 202500:00	–	cnnvd
CVE	CVE-2012-10050	8 Aug 202518:10	–	cve
Cvelist	CVE-2012-10050 CuteFlow <= 2.11.2 Arbitrary File Upload RCE	8 Aug 202518:10	–	cvelist
NVD	CVE-2012-10050	8 Aug 202519:15	–	nvd
Positive Technologies	PT-2025-32403 · Cuteflow · Cuteflow	8 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2012-10050	10 Aug 202518:14	–	redhatcve
Vulnrichment	CVE-2012-10050 CuteFlow <= 2.11.2 Arbitrary File Upload RCE	8 Aug 202518:10	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "6f576c02-9c3d-3cb8-9fc7-391d67ca9d22",
        "vendor": {
          "name": "CuteFlow.org"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "74cd8a13-84c1-31f4-8e9b-dc939ac03d63",
        "product": {
          "name": "CuteFlow"
        },
        "product_version": "* ≤2.11.2"
      }
    ]
  }
]

Source	Link
web	www.web.archive.org/web/20120729071444/http://www.cuteflow.org/
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/cuteflow_upload_exec.rb
exploit-db	www.exploit-db.com/exploits/20111
web	www.web.archive.org/web/20210922054637/https://itsecuritysolutions.org/2012-07-01-CuteFlow-2.11.2-multiple-security-vulnerabilities/
sourceforge	www.sourceforge.net/projects/cuteflow/
vulncheck	www.vulncheck.com/advisories/cuteflow-arbitrary-file-upload-rce
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.4Medium risk

Vulners AI Score6.4

CVSS 49.3

EPSS0.6565

SSVC