NVD

Id
43245  
Name
CVE-2012-1248  
Description
app/config/core.php in baserCMS 1.6.15 and earlier does not properly handle installations in shared-hosting environments, which allows remote attackers to hijack sessions by leveraging administrative access to a different domain.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-05-15  
Modified Date
2012-05-29  
Seq
2012-1248  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
217689 43245 CVE-2012-1248 http://basercms.net/security/1  View
217690 43245 CVE-2012-1248 JVN#53465692  View
217691 43245 CVE-2012-1248 JVNDB-2012-000043  View
217692 43245 CVE-2012-1248 53543  View
217693 43245 CVE-2012-1248 basercms-core-sec-bypass(75660)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25221 JVNDB-2012-000043 baserCMS におけるセッション管理不備の脆弱性 baserCMS には、セッション管理不備の脆弱性が存在します。 CVE-2012-1248 54486 CVE-2012-1248 43245 4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000043.html 2012-05-15 2012-05-15 View