CVE-2012-1934

SQL injection vulnerability in admin/country/edit.php in Newscoop before 3.5.5 and 4.x before 4 RC4 allows remote attackers to execute arbitrary SQL commands via the f_country_code parameter.

• CWE-89

• http://archives.neohapsis.com/archives/bugtraq/2012-04/0130.htmlExploit
• http://dev.sourcefabric.org/browse/CS-4179Exploit, Vendor Advisory
• http://dev.sourcefabric.org/browse/CS-4181Exploit
• http://secunia.com/advisories/48769Vendor Advisory
• http://www.exploit-db.com/exploits/18752Exploit
• http://www.securityfocus.com/bid/52941Exploit
• http://www.sourcefabric.org/en/newscoop/latestrelease/1141/Newscoop-355-and-Newscoop-4-RC4-security-releases.htmVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74780
• https://www.htbridge.com/advisory/HTB23084Exploit
• http://archives.neohapsis.com/archives/bugtraq/2012-04/0130.htmlExploit
• http://dev.sourcefabric.org/browse/CS-4179Exploit, Vendor Advisory
• http://dev.sourcefabric.org/browse/CS-4181Exploit
• http://secunia.com/advisories/48769Vendor Advisory
• http://www.exploit-db.com/exploits/18752Exploit
• http://www.securityfocus.com/bid/52941Exploit
• http://www.sourcefabric.org/en/newscoop/latestrelease/1141/Newscoop-355-and-Newscoop-4-RC4-security-releases.htmVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74780
• https://www.htbridge.com/advisory/HTB23084Exploit

Published

Aug 27, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-1928Opera before 11.62 allows remote attackers to spoof the addr…
• CVE-2012-1929Opera before 11.62 on Mac OS X allows remote attackers to sp…
• CVE-2012-1930Opera before 11.62 on UNIX uses world-readable permissions f…
• CVE-2012-1931Opera before 11.62 on UNIX, when used in conjunction with an…
• CVE-2012-1932A cross-site scripting (XSS) vulnerability in Wolf CMS 0.75 …4.8
• CVE-2012-1933Multiple PHP remote file inclusion vulnerabilities in Newsco…
• CVE-2012-1935Multiple cross-site scripting (XSS) vulnerabilities in Newsc…
• CVE-2012-1936The wp_create_nonce function in wp-includes/pluggable.php in…
• CVE-2012-1937Multiple unspecified vulnerabilities in the browser engine i…
• CVE-2012-1938Multiple unspecified vulnerabilities in the browser engine i…
• CVE-2012-1939jsinfer.cpp in Mozilla Firefox ESR 10.x before 10.0.5 and Th…
• CVE-2012-1940Use-after-free vulnerability in the nsFrameList::FirstChild …