CVE-2012-10044

MobileCartly 1.0 savepage.php Arbitrary File Creation

CVSS 10 CRITICALEPSS 1.6%CWE-434

Vexday Risk Score

63High priority

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS 10EPSS 1.6%KEV nãoPoC públicaNuclei —Metasploit simPatch —

Lifecycle

10 Aug 2012Metasploit module available

08 Aug 2025Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

MobileCartly version 1.0 contains an arbitrary file creation vulnerability in the savepage.php script. The application fails to perform authentication or authorization checks before invoking file_put_contents() on attacker-controlled input. An unauthenticated attacker can exploit this flaw by sending crafted HTTP GET requests to savepage.php, specifying both the filename and content. This allows arbitrary file creation within the pages/ directory or any writable path on the server, allowing remote code execution.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Affected products

MobileCartly · MobileCartly

public PoCs found — 3

cve_referenceraw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/mobilecartly_upload_exec.rbunverified cve_referencewww.exploit-db.com/exploits/20422unverified cve_referencewww.exploit-db.com/exploits/21079unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/mobilecartly_upload_exec.rb https://web.archive.org/web/20120919081957/http://mobilecartly.com/https://www.exploit-db.com/exploits/20422 https://www.exploit-db.com/exploits/21079 https://www.vulncheck.com/advisories/mobilecartly-arbitrary-file-creation