CVE-2012-6498

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-01-08 · updated 2026-06-16

Description

Unrestricted file upload vulnerability in index.php in Atomymaxsite 2.5 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file, as exploited in the wild in October 2012.

Affected products

Maxtom Atomymaxsite: through 2.5; 1.50, 2.0

References

http://thaicert.or.th/alerts/admin/2012/al2012ad025.html
http://www.youtube.com/watch?v=CfvTCSS3LGY
http://thaicert.or.th/alerts/admin/2012/al2012ad025.html
http://www.youtube.com/watch?v=CfvTCSS3LGY

Get alerted when CVE-2012-6498 or the next vulnerability affects your stack