CVE-2012-10033

Narcissus is vulnerable to remote code execution via improper input handling in its image configuration workflow. Specifically, the backend.php script fails to sanitize the release parameter before passing it to the configure_image() function. This function invokes PHP’s passthru() with the unsanitized input, allowing attackers to inject arbitrary system commands. Exploitation occurs via a crafted POST request, resulting in command execution under the web server’s context.

• CWE-78

• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/narcissus_backend_exec.rb
• https://web.archive.org/web/20101127002623/https://narcissus.angstrom-distribution.org/
• https://www.exploit-db.com/exploits/22709
• https://www.exploit-db.com/exploits/22856
• https://www.vulncheck.com/advisories/narcissus-image-config-command-injection
• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/narcissus_backend_exec.rb
• https://www.exploit-db.com/exploits/22709
• https://www.exploit-db.com/exploits/22856

Published

Aug 5, 2025

Last Modified

Jun 16, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-10028Netwin SurgeFTP version 23c8 and prior contains a vulnerabil…8.6
• CVE-2012-10029Nagios XI Network Monitor prior to Graph Explorer component …8.6
• CVE-2012-1003Multiple integer overflows in Opera 11.60 and earlier allow …
• CVE-2012-10030FreeFloat FTP Server contains multiple critical design flaws…9.8
• CVE-2012-10031BlazeVideo HDTV Player Pro v6.6.0.3 is vulnerable to a stack…8.6
• CVE-2012-10032Maxthon3 version 3.2.2 build 1000 and prior are vulnerable t…8.7
• CVE-2012-10034ClanSphere 2011.3 is vulnerable to a local file inclusion (L…7.5
• CVE-2012-10035Turbo FTP Server versions 1.30.823 and 1.30.826 contain a bu…10
• CVE-2012-10036Project Pier 0.8.8 and earlier contains an unauthenticated a…9.3
• CVE-2012-10037PhpTax version 0.8 contains a remote code execution vulnerab…9.3
• CVE-2012-10038Auxilium RateMyPet contains an unauthenticated arbitrary fil…9.3
• CVE-2012-10039ZEN Load Balancer versions 2.0 and 3.0-rc1 contain a command…9.4