{"uuid": "30927142-a063-41f6-903c-7d456b05efb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-3811", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/avaya_ccr_imageupload_exec.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"rgod \", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits an authentication bypass vulnerability on Avaya IP Office\\n        Customer Call Reporter, which allows a remote user to upload arbitrary files\\n        through the ImageUpload.ashx component. It can be abused to upload and execute\\n        arbitrary ASP .NET code. The vulnerability has been tested successfully on Avaya IP\\n        Office Customer Call Reporter 7.0.4.2 and 8.0.8.15 on Windows 2003 SP2.\", \"disclosure_date\": \"2012-06-28\", \"fullname\": \"exploit/windows/http/avaya_ccr_imageupload_exec\", \"is_install_path\": true, \"mod_time\": \"2026-06-17 11:11:50 +0000\", \"name\": \"Avaya IP Office Customer Call Reporter ImageUpload.ashx Remote Command Execution\", \"needs_cleanup\": true, \"notes\": {}, \"path\": \"/modules/exploits/windows/http/avaya_ccr_imageupload_exec.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/http/avaya_ccr_imageupload_exec\", \"references\": [\"CVE-2012-3811\", \"OSVDB-83399\", \"BID-54225\", \"URL-https://downloads.avaya.com/css/P8/documents/100164021\", \"ZDI-12-106\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Avaya IP Office Customer Call Reporter 7.0 and 8.0 / Microsoft Windows Server 2003 SP2\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:42.457287Z"}