CVE-2012-3475 Information

Description

The installer in the Ushahidi Platform before 2.5 omits certain calls to the exit function which allows remote attackers to obtain administrative privileges via unspecified vectors.

Reference

http://openwall.com/lists/oss-security/2012/08/09/5 https://github.com/ushahidi/Ushahidi_Web/commit/7892559 https://github.com/ushahidi/Ushahidi_Web/commit/fcdad03

Share on: