{"id":"CVE-2012-3811","aliases":["EUVD-2012-3758","GHSA-mp38-6v6c-xp85"],"status":"published","title":"Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya...","description":"Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call Reporter 7.0 before 7.0.5.8 Q1 2012 Maintenance Release and 8.0 before 8.0.9.13 Q1 2012 Maintenance Release allows remote attackers to execute arbitrary code by uploading an executable file and then accessing it via a direct request.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.62528,"percentile":0.99195,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2012-07-03T19:00:00Z","modified":"2026-06-16T23:43:55Z","exploits":[{"source":"exploitdb","id":"EDB-21847","title":"Avaya IP Office Customer Call Reporter - 'ImageUpload.ashx' Remote Command Execution (Metasploit)","type":"remote","platform":"windows","date":"2012-10-10","verified":true,"url":"https://www.exploit-db.com/exploits/21847"},{"source":"metasploit","id":"exploit/windows/http/avaya_ccr_imageupload_exec","title":"Avaya IP Office Customer Call Reporter ImageUpload.ashx Remote Command Execution","type":"exploit","platform":"Windows","date":"2012-06-28","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/http/avaya_ccr_imageupload_exec"}],"products":[{"vendor":"avaya","product":"ip_office_customer_call_reporter"}],"references":[{"url":"http://zerodayinitiative.com/advisories/ZDI-12-106/","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://downloads.avaya.com/css/P8/documents/100164021","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-3811"},{"url":"http://zerodayinitiative.com/advisories/ZDI-12-106"},{"url":"https://github.com/advisories/GHSA-mp38-6v6c-xp85"}],"sources":{"cve":[{"id":"CVE-2012-3811","description":"Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call Reporter 7.0 before 7.0.5.8 Q1 2012 Maintenance Release and 8.0 before 8.0.9.13 Q1 2012 Maintenance Release allows remote attackers to execute arbitrary code by uploading an executable file and then accessing it via a direct request.","status":"published","published":"2012-07-03T19:00:00Z","modified":"2024-09-16T17:33:28.487Z","updated_at":"2026-11-02T14:34:50.615647Z"}],"euvd":[{"id":"EUVD-2012-3758","description":"Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call Reporter 7.0 before 7.0.5.8 Q1 2012 Maintenance Release and 8.0 before 8.0.9.13 Q1 2012 Maintenance Release allows remote attackers to execute arbitrary code by uploading an executable file and then accessing it via a direct request.","status":"published","published":"2012-07-03T19:00:00Z","modified":"2024-09-16T17:33:28Z","updated_at":"2026-11-03T00:55:41.00036Z"}],"ghsa":[{"id":"GHSA-mp38-6v6c-xp85","title":"Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya...","description":"Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call Reporter 7.0 before 7.0.5.8 Q1 2012 Maintenance Release and 8.0 before 8.0.9.13 Q1 2012 Maintenance Release allows remote attackers to execute arbitrary code by uploading an executable file and then accessing it via a direct request.","status":"published","published":"2022-05-17T05:27:45Z","modified":"2025-04-11T04:00:05Z","updated_at":"2026-11-02T15:01:11.088321Z"}],"nvd":[{"id":"CVE-2012-3811","description":"Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call Reporter 7.0 before 7.0.5.8 Q1 2012 Maintenance Release and 8.0 before 8.0.9.13 Q1 2012 Maintenance Release allows remote attackers to execute arbitrary code by uploading an executable file and then accessing it via a direct request.","status":"published","published":"2012-07-03T19:55:04.663Z","modified":"2026-06-16T23:43:55.767Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:02:14.774945Z"}]}}