CVE

Id
54291  
CVE No.
CVE-2012-1048  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in communityplusplus/www/administrator.php in eFront Community++ edition 3.6.10, and possibly other editions, allows remote attackers to inject arbitrary web script or HTML via the filter parameter.  
Phase
Assigned (20120212)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
570364 54291 CVE-2012-1048 BUGTRAQ:20120207 eFronts Community++ v3.6.10 - Cross Site Vulnerability  View
570365 54291 CVE-2012-1048 URL:http://archives.neohapsis.com/archives/bugtraq/2012-02/0033.html  View
570366 54291 CVE-2012-1048 MISC:http://www.vulnerability-lab.com/get_content.php?id=423  View
570367 54291 CVE-2012-1048 BID:51894  View
570368 54291 CVE-2012-1048 URL:http://www.securityfocus.com/bid/51894  View
570369 54291 CVE-2012-1048 XF:efrontcommunity-administrator-xss(73043)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
26869 JVNDB-2012-002576 Puppet および Puppet Enterprise の change_user メソッドにおける権限を取得される脆弱性 Puppet および Puppet Enterprise (PE) の SUIDManager (lib/puppet/util/suidmanager.rb) 内の change_user メソッドは、グループの権限を適切に管理しないため、権限を取得される脆弱性が存在します。 CVE-2012-1053 54291 6.9 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002576.html  View