CVE-2012-1248

app/config/core.php in baserCMS 1.6.15 and earlier does not properly handle installations in shared-hosting environments, which allows remote attackers to…

published May 15, 2012

CVSS
—
EPSS
3%
Percentile
85.5
In the wild
Unconfirmed
What it is

app/config/core.php in baserCMS 1.6.15 and earlier does not properly handle installations in shared-hosting environments, which allows remote attackers to hijack sessions by leveraging administrative access to a different domain.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02669 · 85.5th percentile
Published
2012-05-15T20:00Z
EPSS history
Timeline
  • 15 MAY 20:00Z
    app/config/core.php in baserCMS 1.6.15 and earlier does not properly handle installations in shared-hosting environments, which allows remote attackers to…
    cvelistv5