5.1

CVE-2012-1248

app/config/core.php in baserCMS 1.6.15 and earlier does not properly handle installations in shared-hosting environments, which allows remote attackers to hijack sessions by leveraging administrative access to a different domain.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Basercms ≫ Basercms Version <= 1.6.15
Basercms ≫ Basercms Version1.5.4
Basercms ≫ Basercms Version1.5.5
Basercms ≫ Basercms Version1.5.6
Basercms ≫ Basercms Version1.5.7
Basercms ≫ Basercms Version1.5.8
Basercms ≫ Basercms Version1.5.9
Basercms ≫ Basercms Version1.6.0
Basercms ≫ Basercms Version1.6.1
Basercms ≫ Basercms Version1.6.2
Basercms ≫ Basercms Version1.6.3
Basercms ≫ Basercms Version1.6.4
Basercms ≫ Basercms Version1.6.5
Basercms ≫ Basercms Version1.6.6
Basercms ≫ Basercms Version1.6.7
Basercms ≫ Basercms Version1.6.7.1
Basercms ≫ Basercms Version1.6.8
Basercms ≫ Basercms Version1.6.9
Basercms ≫ Basercms Version1.6.9.1
Basercms ≫ Basercms Version1.6.10
Basercms ≫ Basercms Version1.6.11
Basercms ≫ Basercms Version1.6.11.1
Basercms ≫ Basercms Version1.6.11.2
Basercms ≫ Basercms Version1.6.11.3
Basercms ≫ Basercms Version1.6.11.4
Basercms ≫ Basercms Version1.6.12
Basercms ≫ Basercms Version1.6.13
Basercms ≫ Basercms Version1.6.13.1
Basercms ≫ Basercms Version1.6.13.6
Basercms ≫ Basercms Version1.6.14
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.24% 0.774
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.1 4.9 6.4
AV:N/AC:H/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000043
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/53543
Third Party Advisory
VDB Entry