CVE-2012-1248

Published: May 15, 2012Modified: Apr 29, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

app/config/core.php in baserCMS 1.6.15 and earlier does not properly handle installations in shared-hosting environments, which allows remote attackers to hijack sessions by leveraging administrative access to a different domain.

Affected (30)

Products: Basercms: Basercms

Basercms

1 product

Basercms

Configuration A

30 vulnerable

Vulnerable Software	Affected Versions
Basercms Basercms	Up to 1.6.15
Basercms Basercms	Version 1.5.4
Basercms Basercms	Version 1.5.5
Basercms Basercms	Version 1.5.6
Basercms Basercms	Version 1.5.7
Basercms Basercms	Version 1.5.8
Basercms Basercms	Version 1.5.9
Basercms Basercms	Version 1.6.0
Basercms Basercms	Version 1.6.10
Basercms Basercms	Version 1.6.11.1
Basercms Basercms	Version 1.6.11.2
Basercms Basercms	Version 1.6.11.3
Basercms Basercms	Version 1.6.11.4
Basercms Basercms	Version 1.6.11
Basercms Basercms	Version 1.6.12
Basercms Basercms	Version 1.6.13.1
Basercms Basercms	Version 1.6.13.6
Basercms Basercms	Version 1.6.13
Basercms Basercms	Version 1.6.14
Basercms Basercms	Version 1.6.1
Basercms Basercms	Version 1.6.2
Basercms Basercms	Version 1.6.3
Basercms Basercms	Version 1.6.4
Basercms Basercms	Version 1.6.5
Basercms Basercms	Version 1.6.6
Basercms Basercms	Version 1.6.7.1
Basercms Basercms	Version 1.6.7
Basercms Basercms	Version 1.6.8
Basercms Basercms	Version 1.6.9.1
Basercms Basercms	Version 1.6.9