CVE-2012-1200
Nova CMS - Remote File Inclusion via Multiple Parameter Injection
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2012-1200. PoCs published by indoushka.
AI-analyzed exploit summary The provided text describes a remote file inclusion vulnerability in Nova CMS, where insufficient input sanitization allows attackers to execute malicious PHP code. The example URL demonstrates the vulnerability but lacks executable exploit code.
Description
Multiple PHP remote file inclusion vulnerabilities in Nova CMS allow remote attackers to execute arbitrary PHP code via a URL in the (1) fileType parameter to optimizer/index.php, (2) id parameter to administrator/modules/moduleslist.php, (3) filename parameter to includes/function/gets.php, or (4) conf[blockfile] parameter to includes/function/usertpl.php.
Exploits (4)
The provided text describes a remote file inclusion vulnerability in Nova CMS, where insufficient input sanitization allows attackers to execute malicious PHP code. The example URL demonstrates the vulnerability but lacks executable exploit code.
The provided text describes a remote file inclusion vulnerability in Nova CMS, where insufficient input sanitization allows attackers to include malicious PHP files via the 'conf[blockfile]' parameter. No actual exploit code is present, only a description and example URL.
The provided text describes a remote file inclusion vulnerability in Nova CMS, where insufficient input sanitization allows attackers to include malicious PHP files. The example URL demonstrates the vulnerability but lacks executable exploit code.
The provided text describes a remote file inclusion vulnerability in Nova CMS, where insufficient input sanitization allows attackers to execute malicious PHP code. The example URL demonstrates the vulnerability but lacks executable exploit code.