Stack-based buffer overflow in Sysax Multi Server before 5.52, when HTTP is enabled, allows remote authenticated users with the create fold…

1. 2012-01-18 First public exploit (EDB-18382)
2. 2013-01-31 Published

46.07% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-09).

• Metasploit exploit/windows/http/sysax_create_folder Sysax Multi Server 5.64 Create Folder Buffer Overflow metasploit exploit, normal rank, 2012-07-29
• EDB-18420 Sysax Multi Server 5.50 - Create Folder Remote Code Execution Buffer Overflow (Metasploit) remote, 2012-01-26
• EDB-18382 Sysax Multi Server 5.50 - Create Folder Buffer Overflow remote, 2012-01-18
• pwnag3.com http://www.pwnag3.com/2012/01/sysax-multi-server-550-exploit.html referenced PoC, tagged "exploit" by a source, unverified
• securityfocus.com http://www.securityfocus.com/bid/51548 referenced PoC, tagged "exploit" by a source, unverified

Weakness

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

• exploit-db.com /exploits/18382

  exploit

• exploit-db.com /exploits/18420

  exploit

• pwnag3.com /2012/01/sysax-multi-server-550-exploit.html

  exploit

• securityfocus.com /bid/51548

  vdb-entry, exploit

• CVE List CVE-2012-6530
• NVD CVE-2012-6530

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.