CVE-2012-3448

Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors.

• http://ganglia.info/?p=549Patch, Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-July/084196.html
• http://lists.fedoraproject.org/pipermail/package-announce/2012-July/084202.html
• http://secunia.com/advisories/50047Vendor Advisory
• http://www.debian.org/security/2013/dsa-2610
• http://www.openwall.com/lists/oss-security/2012/08/02/1
• http://www.securityfocus.com/bid/54699
• https://bugs.gentoo.org/show_bug.cgi?id=428776
• https://bugzilla.redhat.com/show_bug.cgi?id=845124
• https://www.exploit-db.com/exploits/38030/
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00136.html
• http://ganglia.info/?p=549Patch, Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-July/084196.html
• http://lists.fedoraproject.org/pipermail/package-announce/2012-July/084202.html
• http://secunia.com/advisories/50047Vendor Advisory
• http://www.debian.org/security/2013/dsa-2610
• http://www.openwall.com/lists/oss-security/2012/08/02/1
• http://www.securityfocus.com/bid/54699
• https://bugs.gentoo.org/show_bug.cgi?id=428776
• https://bugzilla.redhat.com/show_bug.cgi?id=845124
• https://www.exploit-db.com/exploits/38030/
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00136.html

Published

Aug 6, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-3442The (1) django.http.HttpResponseRedirect and (2) django.http…
• CVE-2012-3443The django.forms.ImageField class in the form system in Djan…
• CVE-2012-3444The get_image_dimensions function in the image-handling func…
• CVE-2012-3445The virTypedParameterArrayClear function in libvirt 0.9.13 d…
• CVE-2012-3446Apache Libcloud before 0.11.1 uses an incorrect regular expr…5.9
• CVE-2012-3447virt/disk/api.py in OpenStack Compute (Nova) 2012.1.x before…
• CVE-2012-3449Open vSwitch 1.4.2 uses world writable permissions for (1) /…
• CVE-2012-3450pdo_sql_parser.re in the PDO extension in PHP before 5.3.14 …
• CVE-2012-3451Apache CXF before 2.4.9, 2.5.x before 2.5.5, and 2.6.x befor…
• CVE-2012-3452gnome-screensaver 3.4.x before 3.4.4 and 3.5.x before 3.5.4,…
• CVE-2012-3453logol 1.5.0 uses world writable permissions for the /var/lib…
• CVE-2012-3454eXtplorer 2.1.0b6 uses world writable permissions for the /v…