PT-2012-3664 · Sourcefabric · Newscoop
Published
2012-08-27
·
Updated
2017-08-29
·
CVE-2012-1933
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Newscoop versions 3.5.x through 3.5.4
Newscoop versions 4.0.0 through 4.0.RC3
Description
The issue allows remote attackers to execute arbitrary PHP code when register globals is enabled. This can be achieved by providing a URL in the
GLOBALS[g campsiteDir] parameter to specific API endpoints such as "include/phorum load.php", "conf/install conf.php", or "conf/liveuser configuration.php".Recommendations
For Newscoop versions 3.5.x through 3.5.4, update to version 3.5.5 or later.
For Newscoop versions 4.0.0 through 4.0.RC3, update to version 4.RC4 or later.
As a temporary workaround, consider disabling the register globals setting until a patch is available.
Restrict access to the vulnerable API endpoints "include/phorum load.php", "conf/install conf.php", and "conf/liveuser configuration.php" to minimize the risk of exploitation.
Avoid using the
GLOBALS[g campsiteDir] parameter in the affected API endpoints until the issue is resolved.Exploit
Fix
RCE
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Newscoop