CVE-2012-6509: Netartmedia Car Portal

High severity, CVSS 7.5. EPSS: 6.8% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in NetArt Media Car Portal 3.0 allows remote attackers to execute arbitrary PHP code by uploading a file a double extension, as demonstrated by .php%00.jpg.

Affected products

• Netartmedia Car Portal: version 3.0 only

Published 2013-01-24. Last modified 2026-06-16.