CVE-2012-10050

CVE-2012-10050 affects CuteFlow up to version 2.11.2. The vulnerability is an arbitrary file upload in the restart_circulation_values_write.php script, where uploaded file types aren’t validated, allowing unauthenticated attackers to place PHP files in the upload/___1/ directory. These files can ...