Published: 18/02/2012 Updated: 29/08/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 770

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple PHP remote file inclusion vulnerabilities in Nova CMS allow remote malicious users to execute arbitrary PHP code via a URL in the (1) fileType parameter to optimizer/index.php, (2) id parameter to administrator/modules/moduleslist.php, (3) filename parameter to includes/function/gets.php, or (4) conf[blockfile] parameter to includes/function/usertpl.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
nova-cms nova cms -

source: wwwsecurityfocuscom/bid/51976/info Nova CMS is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input Exploiting these issues may allow a remote attacker to obtain sensitive information or execute malicious PHP code in the context of the webserver pr ...

source: wwwsecurityfocuscom/bid/51976/info Nova CMS is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input Exploiting these issues may allow a remote attacker to obtain sensitive information or execute malicious PHP code in the context of the webserver proces ...

source: wwwsecurityfocuscom/bid/51976/info Nova CMS is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input Exploiting these issues may allow a remote attacker to obtain sensitive information or execute malicious PHP code in the context of the webserver process ...

source: wwwsecurityfocuscom/bid/51976/info Nova CMS is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input Exploiting these issues may allow a remote attacker to obtain sensitive information or execute malicious PHP code in the context of the webserver proc ...

CWE-94 http://packetstormsecurity.org/files/109669/Nova-CMS-Remote-File-Inclusion.html http://www.securityfocus.com/bid/51976 https://exchange.xforce.ibmcloud.com/vulnerabilities/73159 https://nvd.nist.gov https://www.exploit-db.com/exploits/36699/

CVE-2012-1200

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect