{"uuid": "fe21b3af-2d0a-4e9b-9e85-71cac155838c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4940", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/axigen_file_access.rb", "content": "{\"actions\": [{\"description\": \"Delete remote file\", \"name\": \"Delete\"}, {\"description\": \"Read remote file\", \"name\": \"Read\"}], \"aliases\": [], \"arch\": \"\", \"author\": [\"Zhao Liang\", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a directory traversal vulnerability in the WebAdmin\\n          interface of Axigen, which allows an authenticated user to read and delete\\n          arbitrary files with SYSTEM privileges. The vulnerability is known to work on\\n          Windows platforms. This module has been tested successfully on Axigen 8.10 over\\n          Windows 2003 SP2.\", \"disclosure_date\": \"2012-10-31\", \"fullname\": \"auxiliary/admin/http/axigen_file_access\", \"is_install_path\": true, \"mod_time\": \"2025-05-16 01:16:37 +0000\", \"name\": \"Axigen Arbitrary File Read and Delete\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"os-resource-loss\"]}, \"path\": \"/modules/auxiliary/admin/http/axigen_file_access.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"admin/http/axigen_file_access\", \"references\": [\"US-CERT-VU-586556\", \"CVE-2012-4940\", \"OSVDB-86802\"], \"rport\": 9000, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:43.908200Z"}