Unrated severityNVD Advisory· Published Aug 27, 2012· Updated Jun 16, 2026
CVE-2012-1935
CVE-2012-1935
Description
Multiple cross-site scripting (XSS) vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4.x before 4 RC4 allow remote attackers to inject arbitrary web script or HTML via the (1) Back parameter to admin/ad.php, or the (2) token or (3) f_email parameter to admin/password_check_token.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:a:sourcefabric:newscoop:3.5.0:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:sourcefabric:newscoop:3.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:sourcefabric:newscoop:3.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:sourcefabric:newscoop:3.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:sourcefabric:newscoop:3.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:sourcefabric:newscoop:3.5.4:*:*:*:*:*:*:*
- cpe:2.3:a:sourcefabric:newscoop:4:rc3:*:*:*:*:*:*
- (no CPE)range: >=3.5,<3.5.5 || >=4,<4 RC4
Patches
Vulnerability mechanics
References
10- archives.neohapsis.com/archives/bugtraq/2012-04/0130.htmlnvdExploit
- dev.sourcefabric.org/browse/CS-4179nvdExploitVendor Advisory
- dev.sourcefabric.org/browse/CS-4182nvdExploitVendor Advisory
- dev.sourcefabric.org/browse/CS-4183nvdExploitVendor Advisory
- www.exploit-db.com/exploits/18752nvdExploit
- www.securityfocus.com/bid/52941nvdExploit
- www.htbridge.com/advisory/HTB23084nvdExploit
- secunia.com/advisories/48769nvdVendor Advisory
- www.sourcefabric.org/en/newscoop/latestrelease/1141/Newscoop-355-and-Newscoop-4-RC4-security-releases.htmnvdVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/74781nvd
News mentions
0No linked articles in our index yet.