CVE

Id
55024  
CVE No.
CVE-2012-1781  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in ajax/commentajax.php in SocialCMS 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) TREF_email_address or (2) TR_name parameters.  
Phase
Assigned (20120319)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
575788 55024 CVE-2012-1781 MISC:http://packetstormsecurity.org/files/110043/SocialCMS-Cross-Site-Scripting-SQL-Injection.html  View
575789 55024 CVE-2012-1781 BID:52109  View
575790 55024 CVE-2012-1781 URL:http://www.securityfocus.com/bid/52109  View
575791 55024 CVE-2012-1781 OSVDB:79457  View
575792 55024 CVE-2012-1781 URL:http://osvdb.org/79457  View
575793 55024 CVE-2012-1781 SECUNIA:48082  View
575794 55024 CVE-2012-1781 URL:http://secunia.com/advisories/48082  View
575795 55024 CVE-2012-1781 XF:socialcms-search-xss(73442)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
25181 JVNDB-2011-003766 WordPress 用 Video Embed & Thumbnail Generator プラグインにおけるインストールパスを取得される脆弱性 WordPress 用 Video Embed & Thumbnail Generator プラグインの Media Upload フォームには、インストールパスを取得される脆弱性が存在します。 CVE-2012-1786 55024 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003766.html  View