CVE-2012-1933 in Newscoop정보

요약

\~에 의해 MITRE

Multiple PHP remote file inclusion vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4 before RC4, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[g_campsiteDir] parameter to (1) include/phorum_load.php, (2) conf/install_conf.php, or (3) conf/liveuser_configuration.php.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

예약하다

2012. 03. 28.

공개

2012. 08. 27.

모더레이션

수락

항목

VDB-61902

CPE

준비됨

CWE

CWE-94 (확인됨)

익스플로잇

다운로드

CVSS

6.8 (NVD)

EPSS

0.06518

KEV

아니요

활동

매우 낮음

출처

MITRE	https://www.cve.org/CVERecord?id=CVE-2012-1933
NVD	https://nvd.nist.gov/vuln/detail/CVE-2012-1933
CVE Details	https://www.cvedetails.com/cve/CVE-2012-1933/

◂ 이전 개요 다음 ▸

Interested in the pricing of exploits?

See the underground prices here!