CVE-2012-1248
app/config/core.php in baserCMS 1.6.15 and earlier does not properly handle installations in shared-hosting environments, which allows remote attackers to hijack sessions by lev…
Published: 2012-05-15 · CVSS: Unscored
app/config/core.php in baserCMS 1.6.15 and earlier does not properly handle installations in shared-hosting environments, which allows remote attackers to hijack sessions by leveraging administrative access to a different domain.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7