CVE-2012-5893: Medium severity havalite vulnerability
Published Nov 17, 2012
·Updated
Unrestricted file upload vulnerability in havaupload.php in Havalite CMS 1.1.0 and earlier allows remote attackers to execute arbitrary code by uploading a file with a .php;.gif extension, then accessing it via a direct request to the file in tmp/files/.
Affected Software
1 affected component
Havalite CMS<=1.1.0
Event History
Nov 17, 2012
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-5893?
CVE-2012-5893 has a high severity rating due to its potential for remote code execution.
2
How do I fix CVE-2012-5893?
To fix CVE-2012-5893, upgrade Havalite CMS to version 1.1.1 or later, which addresses this vulnerability.
3
What type of attack can exploit CVE-2012-5893?
CVE-2012-5893 can be exploited by remote attackers through unrestricted file uploads leading to arbitrary code execution.
4
In which versions of Havalite CMS is CVE-2012-5893 present?
CVE-2012-5893 is present in Havalite CMS version 1.1.0 and earlier.
5
Where can the uploaded files exploited in CVE-2012-5893 be found on the server?
Exploited files from CVE-2012-5893 can be found in the tmp/files/ directory on the server.