CVE-2012-1933

Multiple PHP remote file inclusion vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4 before RC4, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[g_campsiteDir] parameter to (1) include/phorum_load.php, (2) conf/install_conf.php, or (3) conf/liveuser_configuration.php.

• CWE-94

• http://archives.neohapsis.com/archives/bugtraq/2012-04/0130.htmlExploit
• http://dev.sourcefabric.org/browse/CS-4179Exploit
• http://secunia.com/advisories/48769Vendor Advisory
• http://www.exploit-db.com/exploits/18752Exploit
• http://www.securityfocus.com/bid/53147
• http://www.sourcefabric.org/en/newscoop/latestrelease/1141/Newscoop-355-and-Newscoop-4-RC4-security-releases.htm
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75031
• https://www.htbridge.com/advisory/HTB23084Exploit
• http://archives.neohapsis.com/archives/bugtraq/2012-04/0130.htmlExploit
• http://dev.sourcefabric.org/browse/CS-4179Exploit
• http://secunia.com/advisories/48769Vendor Advisory
• http://www.exploit-db.com/exploits/18752Exploit
• http://www.securityfocus.com/bid/53147
• http://www.sourcefabric.org/en/newscoop/latestrelease/1141/Newscoop-355-and-Newscoop-4-RC4-security-releases.htm
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75031
• https://www.htbridge.com/advisory/HTB23084Exploit

Published

Aug 27, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-1927Opera before 11.62 allows remote attackers to spoof the addr…
• CVE-2012-1928Opera before 11.62 allows remote attackers to spoof the addr…
• CVE-2012-1929Opera before 11.62 on Mac OS X allows remote attackers to sp…
• CVE-2012-1930Opera before 11.62 on UNIX uses world-readable permissions f…
• CVE-2012-1931Opera before 11.62 on UNIX, when used in conjunction with an…
• CVE-2012-1932A cross-site scripting (XSS) vulnerability in Wolf CMS 0.75 …4.8
• CVE-2012-1934SQL injection vulnerability in admin/country/edit.php in New…
• CVE-2012-1935Multiple cross-site scripting (XSS) vulnerabilities in Newsc…
• CVE-2012-1936The wp_create_nonce function in wp-includes/pluggable.php in…
• CVE-2012-1937Multiple unspecified vulnerabilities in the browser engine i…
• CVE-2012-1938Multiple unspecified vulnerabilities in the browser engine i…
• CVE-2012-1939jsinfer.cpp in Mozilla Firefox ESR 10.x before 10.0.5 and Th…