CVE-2010-20120

Maple versions up to and including 13's Maplet framework allows embedded commands to be executed automatically when a .maplet file is opened. This behavior bypasses standard security restrictions that normally prevent code execution in regular Maple worksheets. The vulnerability enables attackers to craft malicious .maplet files that execute arbitrary code without user interaction.

• CWE-94

• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/fileformat/maple_maplet.rb
• https://www.exploit-db.com/exploits/16308
• https://www.juniper.net/us/en/threatlabs/ips-signatures/detail.HTTP:MISC:MAPLE-MAPLET-CMD-EXEC.html
• https://www.maplesoft.com/products/maple/
• https://www.vulncheck.com/advisories/maple-maplet-file-creation-command-execution
• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/fileformat/maple_maplet.rb
• https://www.exploit-db.com/exploits/16308

Published

Aug 21, 2025

Last Modified

Jun 16, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-20115Arcane Software’s Vermillion FTP Daemon (vftpd) versions up …9.3
• CVE-2010-20116Rejected reason: This CVE has the been REJECTED and will not…
• CVE-2010-20117Rejected reason: This CVE has the been REJECTED and will not…
• CVE-2010-20118Rejected reason: This CVE has the been REJECTED and will not…
• CVE-2010-20119CommuniCrypt Mail versions up to and including 1.16 contains…8.6
• CVE-2010-2012SQL injection vulnerability in function.php in MigasCMS 1.1,…
• CVE-2010-20121EasyFTP Server versions up to 1.7.0.11 contain a stack-based…9.8
• CVE-2010-20122Xftp FTP Client version up to and including 3.0 (build 0238)…9.3
• CVE-2010-20123Steinberg MyMP3Player version 3.0 (build 3.0.0.67) is vulner…8.4
• CVE-2010-20124Rejected reason: This CVE has the been REJECTED and will not…
• CVE-2010-2013Cross-site scripting (XSS) vulnerability in cp/edit_email.ph…
• CVE-2010-2014Cross-site scripting (XSS) vulnerability in cp/list_content.…