NVD

Id
43791  
Name
CVE-2012-1933  
Description
Multiple PHP remote file inclusion vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4 before RC4, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[g_campsiteDir] parameter to (1) include/phorum_load.php, (2) conf/install_conf.php, or (3) conf/liveuser_configuration.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-08-27  
Modified Date
2012-08-29  
Seq
2012-1933  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
219905 43791 CVE-2012-1933 20120418 Multiple vulnerabilities in Newscoop  View
219906 43791 CVE-2012-1933 http://dev.sourcefabric.org/browse/CS-4179  View
219907 43791 CVE-2012-1933 18752  View
219908 43791 CVE-2012-1933 53147  View
219909 43791 CVE-2012-1933 http://www.sourcefabric.org/en/newscoop/latestrelease/1141/Newscoop-355-and-Newscoop-4-RC4-security-releases.htm  View
219910 43791 CVE-2012-1933 newscoop-gcampsitedir-file-include(75031)  View
219911 43791 CVE-2012-1933 https://www.htbridge.com/advisory/HTB23084  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28212 JVNDB-2012-003919 Newscoop における PHP リモートファイルインクルージョンの脆弱性 Newscoop には、register_globals が有効になっている際、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2012-1933 55171 CVE-2012-1933 43791 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003919.html 2012-04-05 2012-08-29 View