CVE

Id
54247  
CVE No.
CVE-2012-1004  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in UI/Register.pm in Foswiki before 1.1.5 allow remote authenticated users with CHANGE privileges to inject arbitrary web script or HTML via the (1) text, (2) FirstName, (3) LastName, (4) OrganisationName, (5) OrganisationUrl, (6) Profession, (7) Country, (8) State, (9) Address, (10) Location, (11) Telephone, (12) VoIP, (13) InstantMessagingIM, (14) Email, (15) HomePage, or (16) Comment parameter. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20120206)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
570128 54247 CVE-2012-1004 MISC:http://st2tea.blogspot.com/2012/02/foswiki-cross-site-scripting.html  View
570129 54247 CVE-2012-1004 CONFIRM:http://foswiki.org/Support/SecurityAlert-CVE-2012-1004  View
570130 54247 CVE-2012-1004 CONFIRM:http://foswiki.org/Tasks/Item11498  View
570131 54247 CVE-2012-1004 CONFIRM:http://foswiki.org/Tasks/Item11501  View
570132 54247 CVE-2012-1004 SECUNIA:47849  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
25743 JVNDB-2012-001450 NetSarang の Xlpd および Xmanager Enterprise におけるサービス運用妨害 (DoS) の脆弱性 NetSarang の Xlpd および Xmanager Enterprise には、サービス運用妨害 (デーモンクラッシュ) 状態となる脆弱性が存在します。 CVE-2012-1009 54247 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001450.html  View