NVD

Id
43019  
Name
CVE-2012-0984  
Description
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS before 2.5.5 allow remote attackers to inject arbitrary web script or HTML via the (1) to_userid parameter to modules/pm/pmlite.php or the (2) current_file, (3) imgcat_id, or (4) target parameter to class/xoopseditor/tinymce/tinymce/jscripts/tiny_mce/plugins/xoopsimagemanager/xoopsimagebrowser.php.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-09-11  
Modified Date
2014-09-11  
Seq
2012-0984  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
216517 43019 CVE-2012-0984 20120418 Multiple XSS vulnerabilities in XOOPS  View
216518 43019 CVE-2012-0984 http://packetstormsecurity.org/files/111958/XOOPS-2.5.4-Cross-Site-Scripting.html  View
216519 43019 CVE-2012-0984 18753  View
216520 43019 CVE-2012-0984 53143  View
216521 43019 CVE-2012-0984 xoops-pmlite-xoopsimagebrowser-xss(75024)  View
216522 43019 CVE-2012-0984 http://xoops.org/modules/news/article.php?storyid=6284  View
216523 43019 CVE-2012-0984 https://www.htbridge.com/advisory/multiple_vulnerabilities_in_xoops.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30559 JVNDB-2012-006267 XOOPS におけるクロスサイトスクリプティングの脆弱性 XOOPS には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-0984 54222 CVE-2012-0984 43019 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006267.html 2012-04-16 2014-09-12 View