CVE-2012-1933

no score yetEPSS 5.6%

sourcefabric newscoop: no CVSS score yet. EPSS 5.6% chance of exploitation in the next 30 days.

Multiple PHP remote file inclusion vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4 before RC4, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[g_campsiteDir] parameter to (1) include/phorum_load.php, (2) conf/install_conf.php, or (3) conf/liveuser_configuration.php.

EPSS: 5.6% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2012-08-27
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

sourcefabric:newscoop

References

http://archives.neohapsis.com/archives/bugtraq/2012-04/0130.html
http://dev.sourcefabric.org/browse/CS-4179
http://secunia.com/advisories/48769
http://www.exploit-db.com/exploits/18752
http://www.securityfocus.com/bid/53147

Check your stack JSON