What’s Vulnerable › Vulnerabilities

CVE-2012-3448

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 9.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2012-08-06 · updated 2026-06-16

Description

Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors.

Affected products

• Ganglia-Web: through 3.5.0; 2.1.0, 2.1.1, 2.1.2, 2.1.3, 2.1.5, 2.1.6 (+7)

References

• http://ganglia.info/?p=549
• http://lists.fedoraproject.org/pipermail/package-announce/2012-July/084196.html
• http://lists.fedoraproject.org/pipermail/package-announce/2012-July/084202.html
• http://secunia.com/advisories/50047
• http://www.debian.org/security/2013/dsa-2610
• http://www.openwall.com/lists/oss-security/2012/08/02/1
• http://www.securityfocus.com/bid/54699
• https://bugs.gentoo.org/show_bug.cgi?id=428776
• https://bugzilla.redhat.com/show_bug.cgi?id=845124
• https://www.exploit-db.com/exploits/38030/
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00136.html
• http://ganglia.info/?p=549

Get alerted when CVE-2012-3448 or the next vulnerability affects your stack