CVE-2012-1200: Multiple PHP remote file inclusion vulnerabilities in Nova CMS allow remote attackers to execute arbitrary...

Security readout for executives and security teams

CVE-2012-1200 is a remote file inclusion issue in Nova CMS. A remote attacker could supply an external URL through specific parameters and cause the application to run attacker-controlled PHP code. The sources do not identify affected versions, a vendor patch, or active exploitation. Likely exposure is limited to internet-reachable Nova CMS deployments containing the named PHP files. The source bundle does not provide CPEs, version ranges, deployment prevalence, or fixed builds, so inventory confirmation is required. Treat as high priority for any public Nova CMS site because the stated impact is arbitrary PHP execution. Priority drops if Nova CMS is not present or the affected files are unreachable. Mitigation focus: Identify any Nova CMS deployments and their exact installed versions.; Check vendor or archived project guidance for fixed releases or replacement advice.; Remove or restrict public access to affected Nova CMS paths until resolved..

Prepared

Jun 27, 2026, 17:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.