CVE-2012-1248 in baserCMSinfo

Summary

app/config/core.php in baserCMS 1.6.15 and earlier does not properly handle installations in shared-hosting environments, which allows remote attackers to hijack sessions by leveraging administrative access to a different domain.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

02/21/2012

Disclosure

05/15/2012

Entries

1

CPE

ready

CVSS

5.6

EPSS

0.01244

CTI

0.00

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2012-1248
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2012-1248
CVE Detailshttps://www.cvedetails.com/cve/CVE-2012-1248/

◂ PreviousOverviewNext ▸

Want to know what is going to be exploited?

We predict KEV entries!