CVE-2012-10044 Details
Description
MobileCartly version 1.0 contains an arbitrary file creation vulnerability in the savepage.php script. The application fails to perform authentication or authorization checks before invoking file_put_contents() on attacker-controlled input. An unauthenticated attacker can exploit this flaw by sending crafted HTTP GET requests to savepage.php, specifying both the filename and content. This allows arbitrary file creation within the pages/ directory or any writable path on the server, allowing remote code execution.
A vulnerability exists in MobileCartly version 1.0 within the savepage.php script, where the application lacks proper authentication and authorization checks. This oversight allows an unauthenticated attacker to exploit the vulnerability by sending crafted HTTP GET requests that include a filename and content. The vulnerable script uses file_put_contents() to write the specified content to a file, enabling arbitrary file creation in the pages/ directory or any other writable location on the server. This vulnerability can lead to remote code execution.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Aug 8, 2025CISA-ADP
Assessed Aug 8, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/mobilecartly_upload_exec.rb | CISA-ADP | ExploitSource Code |
| https://www.exploit-db.com/exploits/20422 | CISA-ADP | ExploitTechnical Description |
| https://www.exploit-db.com/exploits/21079 | CISA-ADP | Exploit |
| https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/mobilecartly_upload_exec.rb | [email protected] | ExploitSource Code |
| https://web.archive.org/web/20120919081957/http://mobilecartly.com/ | [email protected] | ProductVendor |
| https://www.exploit-db.com/exploits/20422 | [email protected] | ExploitTechnical Description |
| https://www.exploit-db.com/exploits/21079 | [email protected] | Exploit |
| https://www.vulncheck.com/advisories/mobilecartly-arbitrary-file-creation | [email protected] | AdvisoryBundleExploit |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-434 | Unrestricted Upload of File with Dangerous Type | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| MobileCartly | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 16, 2026 | CVE Modified | [email protected] |
| Jun 16, 2026 | CVE Modified | CISA-ADP |
| Aug 8, 2025 | New CVE Received | [email protected] |
| Aug 8, 2025 | CVE Modified | CISA-ADP |