CVE-2012-10038: Auxilium Ratemypet

Critical severity, CVSS 9.3. EPSS: 1.6% chance of exploitation in the next 30 days.

Auxilium RateMyPet contains an unauthenticated arbitrary file upload vulnerability in upload_banners.php. The banner upload feature fails to validate file types or enforce authentication, allowing remote attackers to upload malicious PHP files. These files are stored in a web-accessible /banners/ directory and can be executed directly, resulting in remote code execution.

Affected products

• Auxilium Ratemypet: any version

Published 2025-08-11. Last modified 2026-06-16.