CVE-2012-1935

Newscoop 3.5.x < 3.5.5 and 4.x < 4 RC4 - Cross-Site Scripting via Back Parameter or Token/Email Parameters

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2012-1935. PoCs published by High-Tech Bridge SA.

AI-analyzed exploit summary This advisory details multiple vulnerabilities in Newscoop, including Remote File Inclusion (RFI), SQL Injection (SQLi), and Cross-Site Scripting (XSS). It provides Proof-of-Concept (PoC) URLs for each vulnerability but does not include executable exploit code.

Description

Multiple cross-site scripting (XSS) vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4.x before 4 RC4 allow remote attackers to inject arbitrary web script or HTML via the (1) Back parameter to admin/ad.php, or the (2) token or (3) f_email parameter to admin/password_check_token.php.

Exploits (1)

exploitdb WRITEUP VERIFIED

by High-Tech Bridge SA · textwebappsphp

https://www.exploit-db.com/exploits/18752

View Code ZIP pw:eip

This advisory details multiple vulnerabilities in Newscoop, including Remote File Inclusion (RFI), SQL Injection (SQLi), and Cross-Site Scripting (XSS). It provides Proof-of-Concept (PoC) URLs for each vulnerability but does not include executable exploit code.

Classification

Writeup 100%

Attack Type

Rce | Sqli | Xss

Complexity

Trivial

Reliability

Reliable

Target: Newscoop 3.5.3 and prior, partially 4.0 RC3

Auth required

Prerequisites: register_globals enabled (for RFI) · magic_quotes_gpc disabled (for SQLi) · attacker must be logged in and have permission to manage countries (for SQLi)

MITRE ATT&CK

T1189 - Drive-by Compromise T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 16, 2026 Full analysis →