CVE-2012-10039

ZEN Load Balancer versions 2.0 and 3.0-rc1 contain a command injection vulnerability in content2-2.cgi. The filelog parameter is passed directly into a backtick-delimited exec() call without sanitation. An authenticated attacker can inject arbitrary shell commands, resulting in remote code execution as the root user. ZEN Load Balancer is the predecessor of ZEVENET and SKUDONET. The affected versions (2.0 and 3.0-rc1) are no longer supported. SKUDONET CE is the current community-maintained successor.

• CWE-78

• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/zen_load_balancer_exec.rb
• https://web.archive.org/web/20111015031540/http://www.zenloadbalancer.com/
• https://web.archive.org/web/20221203195056/https://itsecuritysolutions.org/2012-09-21-ZEN-Load-Balancer-v2.0-and-v3.0-rc1-multiple-vulnerabilities/
• https://www.exploit-db.com/exploits/21849
• https://www.fortiguard.com/encyclopedia/ips/33335/zen-load-balancer-filelog-command-execution

Published

Aug 11, 2025

Last Modified

Jun 16, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-10033Narcissus is vulnerable to remote code execution via imprope…9.3
• CVE-2012-10034ClanSphere 2011.3 is vulnerable to a local file inclusion (L…7.5
• CVE-2012-10035Turbo FTP Server versions 1.30.823 and 1.30.826 contain a bu…10
• CVE-2012-10036Project Pier 0.8.8 and earlier contains an unauthenticated a…9.3
• CVE-2012-10037PhpTax version 0.8 contains a remote code execution vulnerab…9.3
• CVE-2012-10038Auxilium RateMyPet contains an unauthenticated arbitrary fil…9.3
• CVE-2012-1004Multiple cross-site scripting (XSS) vulnerabilities in UI/Re…
• CVE-2012-10040Openfiler v2.x contains a command injection vulnerability in…9.4
• CVE-2012-10041WAN Emulator v2.3 contains two unauthenticated command execu…9.3
• CVE-2012-10042Sflog! CMS 1.0 contains an authenticated arbitrary file uplo…8.7
• CVE-2012-10043A stack-based buffer overflow vulnerability exists in ActFax…9.3
• CVE-2012-10044MobileCartly version 1.0 contains an arbitrary file creation…10