CVE-2012-5293: Multiple PHP remote file inclusion vulnerabilities in SAPID CMS 1.2.3 Stable allow remote attackers to exec...

Security readout for executives and security teams

CVE-2012-5293 is an old SAPID CMS issue where exposed PHP extension files could be abused to make the server load remote PHP code. If a vulnerable installation is still internet-facing, compromise could mean attacker-controlled code running on the web server. Exposure is likely limited to legacy SAPID CMS 1.2.3 Stable deployments with the named PHP extension files reachable over HTTP. The source bundle does not provide CPEs, supported-version ranges, or configuration prerequisites. Prioritize this if SAPID CMS remains deployed, especially on internet-facing systems. The issue is old, but the impact is server-side code execution and public exploit references exist. If the product is not present, no immediate action is indicated. Mitigation focus: Inventory public web assets for SAPID CMS 1.2.3 Stable.; Check vendor or project guidance for fixed versions or migration options.; Retire or isolate unsupported SAPID CMS deployments..

Prepared

Jun 27, 2026, 16:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.