CVE-2012-4679

概要

参考情報

• dev.sourcefabric.org/browse/CS-4184
• secunia.com/advisories/48769 · Vendor Advisory
• securityfocus.com/bid/52941
• sourcefabric.org/en/newscoop/latestrelease/1141/Newscoop-355-and-Newscoop-4-RC4-security-releases.htm · Patch
• exchange.xforce.ibmcloud.com/vulnerabilities/74781
• htbridge.com/advisory/HTB23084 · Exploit

newscoop のその他の脆弱性

• CVE-2020-11807高 7.8Because of Unrestricted Upload of a File with a Dangerous Type, Sourcefabric Newscoop 4.4.7 allows an authenticated user to execute arbitrar…
• CVE-2013-0730中 4.3Multiple cross-site scripting (XSS) vulnerabilities in Newscoop 4.x through 4.1.0 allow remote attackers to inject arbitrary web script or H…
• CVE-2012-1935中 4.3Multiple cross-site scripting (XSS) vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4.x before 4 RC4 allow remote attackers to inject arb…
• CVE-2012-1934高 7.5SQL injection vulnerability in admin/country/edit.php in Newscoop before 3.5.5 and 4.x before 4 RC4 allows remote attackers to execute arbit…
• CVE-2012-1933中 6.8Multiple PHP remote file inclusion vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4 before RC4, when register_globals is enabled, allow …