CVE

Id
58135  
CVE No.
CVE-2012-4892  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS 2012-03.08 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) title_en, (2) summary_en, or (3) body_en parameter in a submitnews action to the news module, a different vulnerability than CVE-2012-4890. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  
Phase
Assigned (20120910)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
597315 58135 CVE-2012-4892 OSVDB:80877  View
597316 58135 CVE-2012-4892 URL:http://www.osvdb.org/80877  View
597317 58135 CVE-2012-4892 SECUNIA:48656  View
597318 58135 CVE-2012-4892 URL:http://secunia.com/advisories/48656  View
597319 58135 CVE-2012-4892 XF:flatnux-index-xss(74566)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
29045 JVNDB-2012-004752 VMware Movie Decoder のインストーラにおける権限を取得される脆弱性 VMware Movie Decoder のインストーラには、検索パスに関する処理に不備があるため、権限を取得される脆弱性が存在します。 CVE-2012-4897 58135 6.9 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004752.html  View