CVE

Id
59157  
CVE No.
CVE-2012-5914  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the sed_import function in system/functions.php in Neocrome Seditio build 160 and 161 allow remote attackers to inject arbitrary web script or HTML via the (1) newmsg or (2) rtext parameter. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20121117)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
603892 59157 CVE-2012-5914 MISC:http://packetstormsecurity.org/files/111320/Seditio-Build-161-Cross-Site-Scripting-Information-Disclosure.html  View
603893 59157 CVE-2012-5914 CONFIRM:http://www.neocrome.net/page.php?id=2470  View
603894 59157 CVE-2012-5914 BID:52802  View
603895 59157 CVE-2012-5914 URL:http://www.securityfocus.com/bid/52802  View
603896 59157 CVE-2012-5914 OSVDB:80688  View
603897 59157 CVE-2012-5914 URL:http://osvdb.org/80688  View
603898 59157 CVE-2012-5914 SECUNIA:48637  View
603899 59157 CVE-2012-5914 URL:http://secunia.com/advisories/48637  View
603900 59157 CVE-2012-5914 XF:seditio-forums-xss(74463)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
29730 JVNDB-2012-005437 Havalite におけるクロスサイトスクリプティングの脆弱性 Havalite には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-5919 59157 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005437.html  View