Unscored severity · published Aug 6, 2012
CVE-2012-3448
Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors
–
CVSS
9.9%
EPSS
No
On KEV
Description
Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)9.9% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GA
Ganglia-web · Ganglia
through 3.5.0; 2.1.0; 2.1.1; 2.1.2; 2.1.3; 2.1.5; +8 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-3448
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-3448
Patch
http://ganglia.info/?p=549
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2012-July/084196.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2012-July/084202.html
Vendor Advisory
http://secunia.com/advisories/50047
www.debian.org
http://www.debian.org/security/2013/dsa-2610
www.openwall.com
http://www.openwall.com/lists/oss-security/2012/08/02/1
More from Ganglia-web
9.8
CVE-2015-6816
ganglia-web before 3.7.1 allows remote attackers to bypass authentication
6.1
CVE-2019-20379
ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php cs parameter
6.1
CVE-2019-20378
ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php ce parameter
5.4
CVE-2024-52763
A cross-site scripting (XSS) vulnerability in the component /graph_all_periods.php of Ganglia-web v3.73 to v3.75 allows attackers to execute arbitrary web scripts or HTML via a…
5.4
CVE-2024-52762
A cross-site scripting (XSS) vulnerability in the component /master/header.php of Ganglia-web v3.73 to v3.76 allows attackers to execute arbitrary web scripts or HTML via a…