SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CVE

CVE-2012-1934

SQL injection vulnerability in admin/country/edit.php in Newscoop before 3.5.5 and 4.x before 4 RC4 allows remote attackers to execute arbitrary SQL commands via the f_country_code parameter.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 7.5
Exploit Score: 10.0
Impact Score: 6.4

CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL

Reference:

EXPLOIT-DB-18752

http://archives.neohapsis.com/archives/bugtraq/2012-04/0130.html

SECUNIA-48769

BID-52941

http://dev.sourcefabric.org/browse/CS-4179

http://dev.sourcefabric.org/browse/CS-4181

http://www.sourcefabric.org/en/newscoop/latestrelease/1141/Newscoop-355-and-Newscoop-4-RC4-security-releases.htm

https://www.htbridge.com/advisory/HTB23084

newscoop-edit-sql-injection(74780)


30430



423868



247768



909



194555



282