2012-02-18 - CVE Archive

CVE-2012-1195 HIGH POC THREAT Act Now

Unrestricted file upload vulnerability in andesk/managementsuite/core/core.anonymous/ServerSetup.asmx in the ServerSetup web service in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 86.5%.

Privilege Escalation File Upload Lenovo RCE Lenovo Thinkmanagement Console

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

86.5%

Threat

5.6

CVE-2012-1198 HIGH POC This Week

base_ag_main.php in Basic Analysis and Security Engine (BASE) 1.4.5 allows remote attackers to execute arbitrary code by uploading contents of the file with an executable extension via a create. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE Basic Analysis And Security Engine

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

4.2%

CVE-2012-1200 HIGH POC This Week

Multiple PHP remote file inclusion vulnerabilities in Nova CMS allow remote attackers to execute arbitrary PHP code via a URL in the (1) fileType parameter to optimizer/index.php, (2) id parameter to. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP Code Injection RCE Nova Cms

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

1.5%

CVE-2012-1199 HIGH POC This Week

Multiple PHP remote file inclusion vulnerabilities in Basic Analysis and Security Engine (BASE) 1.4.5 allow remote attackers to execute arbitrary PHP code via a URL in the (1) BASE_path parameter to. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP Code Injection RCE Basic Analysis And Security Engine

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

1.3%