CVE-2012-5231

CVE-2012-5231 describes a PHP code injection vulnerability in miniCMS versions 1.0 and 2.0. Remote attackers can execute arbitrary PHP code by crafting the "pagename" or "area" variables in update.php or updatenews.php, respectively, leading to files with executable extensions being written to the content/ or content/news/ directories. This vulnerability has a CVSS score of 7.5, indicating high severity with low attack complexity and potential for partial confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation in the wild or Metasploit/Nuclei modules, an exploit is publicly available on ExploitDB, though community discussion and media coverage are minimal.