EUVD-2012-6607

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Sockso Music Host <=1.5 path traversal on port 4444 at /file/ permits unauth remote fs reads.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2012-10061	20 Aug 202515:39	–	attackerkb
Circl	CVE-2012-10061	29 May 201815:50	–	circl
CNNVD	Sockso Music Host Server 安全漏洞	20 Aug 202500:00	–	cnnvd
CVE	CVE-2012-10061	20 Aug 202515:39	–	cve
Cvelist	CVE-2012-10061 Sockso Music Host Server <= 1.5 Path Traversal	20 Aug 202515:39	–	cvelist
NVD	CVE-2012-10061	20 Aug 202516:15	–	nvd
OpenVAS	Sockso < 1.5.1 Directory Traversal Vulnerability - Active Check	16 Mar 201200:00	–	openvas
Positive Technologies	PT-2025-34112 · Undefined · Undefined	20 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2012-10061	22 Aug 202516:35	–	redhatcve
Vulnrichment	CVE-2012-10061 Sockso Music Host Server <= 1.5 Path Traversal	20 Aug 202515:39	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "1b77a132-c6f8-3f78-ac4a-39598e1e0e55",
        "vendor": {
          "name": "Sockso Project"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "efd42fa3-ecca-3f81-98d8-348f021c8e27",
        "product": {
          "name": "Music Host Server"
        },
        "product_version": "* ≤1.5"
      }
    ]
  }
]

Source	Link
web	www.web.archive.org/web/20120326095835/http://sockso.pu-gh.com/
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/sockso_traversal.rb
github	www.github.com/rodnaph/sockso
aluigi	www.aluigi.altervista.org/adv/sockso_1-adv.txt
exploit-db	www.exploit-db.com/exploits/18605
vulncheck	www.vulncheck.com/advisories/sockso-music-host-server-path-traversal
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.4Medium risk

Vulners AI Score6.4

CVSS 48.7

EPSS0.55631

SSVC