NVD

Id
43536  
Name
CVE-2012-1664  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the admin panel in osCMax before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter in a process action to admin/login.php; (2) pageTitle, (3) current_product_id, or (4) cPath parameter to admin/new_attributes_include.php; (5) sb_id, (6) sb_key, (7) gc_id, (8) gc_key, or (9) path parameter to admin/htaccess.php; (10) title parameter to admin/information_form.php; (11) search parameter to admin/xsell.php; (12) gross or (13) max parameter to admin/stats_products_purchased.php; (14) status parameter to admin/stats_monthly_sales.php; (15) sorted parameter to admin/stats_customers.php; (16) information_id parameter to /admin/information_manager.php; or (17) zID parameter to /admin/geo_zones.php.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-05-20  
Modified Date
2015-05-21  
Seq
2012-1664  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
218816 43536 CVE-2012-1664 20120404 Multiple vulnerabilities in osCmax  View
218817 43536 CVE-2012-1664 http://bugtrack.oscmax.com/view.php?id=1165  View
218818 43536 CVE-2012-1664 http://www.oscmax.com/blog/michael_s/oscmax_v251_has_been_released_security_update  View
218819 43536 CVE-2012-1664 https://www.htbridge.com/advisory/HTB23081  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30635 JVNDB-2012-006343 osCMax の管理パネルにおけるクロスサイトスクリプティングの脆弱性 osCMax の管理パネルには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-1664 54902 CVE-2012-1664 43536 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006343.html 2012-04-01 2015-05-22 View