GCVE - cpe:2.3:a:sourcefabric:newscoop:3.5.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sourcefabric:newscoop:3.5.2:*:*:*:*:*:*:*

part: a version: 3.5.2 update: *

Vendor	Sourcefabric (`b383ef56-bcab-54bd-96fb-dc3cdcd5ef0b`)
Product	Newscoop (`f541880d-9b15-5265-a8b1-d7efffcb8eec`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/sourcefabric/newscoop`	purl2cpe	2026-06-01 10:11:22.621225
`pkg:rpm/opensuse/newscoop`	purl2cpe	2026-06-01 10:11:22.621226
`pkg:sourceforge/newscoop`	purl2cpe	2026-06-01 10:11:22.621227

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-4679`	vulnerable	2026-06-08 05:02:52.114050	Details available Cross-site scripting (XSS) vulnerability in admin/login.php in Newscoop before 3.5.5 allows remote attackers to inject arbitrary web script or HTML via the f_user_name parameter. Published: 2012-08-27T21:00:00.000Z Updated: 2024-08-06T20:42:55.012Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/52941 http://www.sourcefabric.org/en/newscoop/latestrelease/1141/Newscoop-355-and-Newscoop-4-RC4-security-releases.htm http://dev.sourcefabric.org/browse/CS-4184 http://secunia.com/advisories/48769 https://exchange.xforce.ibmcloud.com/vulnerabilities/74781	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1935`	vulnerable	2026-06-08 05:00:51.549217	Details available Multiple cross-site scripting (XSS) vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4.x before 4 RC4 allow remote attackers to inject arbitrary web script or HTML via the (1) Back parameter to admin/ad.php, or the (2) token or (3) f_email parameter to admin/password_check_token.php. Published: 2012-08-27T21:00:00.000Z Updated: 2024-08-06T19:17:27.117Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/52941 http://www.exploit-db.com/exploits/18752 http://www.sourcefabric.org/en/newscoop/latestrelease/1141/Newscoop-355-and-Newscoop-4-RC4-security-releases.htm http://dev.sourcefabric.org/browse/CS-4182 http://dev.sourcefabric.org/browse/CS-4183	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1934`	vulnerable	2026-06-08 05:00:51.546899	Details available SQL injection vulnerability in admin/country/edit.php in Newscoop before 3.5.5 and 4.x before 4 RC4 allows remote attackers to execute arbitrary SQL commands via the f_country_code parameter. Published: 2012-08-27T21:00:00.000Z Updated: 2024-08-06T19:17:27.521Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/52941 http://www.exploit-db.com/exploits/18752 http://www.sourcefabric.org/en/newscoop/latestrelease/1141/Newscoop-355-and-Newscoop-4-RC4-security-releases.htm http://dev.sourcefabric.org/browse/CS-4181 http://archives.neohapsis.com/archives/bugtraq/2012-04/0130.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1933`	vulnerable	2026-06-08 05:00:51.544760	Details available Multiple PHP remote file inclusion vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4 before RC4, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[g_campsiteDir] parameter to (1) include/phorum_load.php, (2) conf/install_conf.php, or (3) conf/liveuser_configuration.php. Published: 2012-08-27T21:00:00.000Z Updated: 2024-08-06T19:17:27.104Z Open on db.gcve.eu Reference links http://www.exploit-db.com/exploits/18752 http://www.sourcefabric.org/en/newscoop/latestrelease/1141/Newscoop-355-and-Newscoop-4-RC4-security-releases.htm http://dev.sourcefabric.org/browse/CS-4179 http://archives.neohapsis.com/archives/bugtraq/2012-04/0130.html http://www.securityfocus.com/bid/53147	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.