NVD

Id
43793  
Name
CVE-2012-1935  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4.x before 4 RC4 allow remote attackers to inject arbitrary web script or HTML via the (1) Back parameter to admin/ad.php, or the (2) token or (3) f_email parameter to admin/password_check_token.php.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-08-27  
Modified Date
2012-08-28  
Seq
2012-1935  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
219920 43793 CVE-2012-1935 20120418 Multiple vulnerabilities in Newscoop  View
219921 43793 CVE-2012-1935 http://dev.sourcefabric.org/browse/CS-4179  View
219922 43793 CVE-2012-1935 http://dev.sourcefabric.org/browse/CS-4182  View
219923 43793 CVE-2012-1935 http://dev.sourcefabric.org/browse/CS-4183  View
219924 43793 CVE-2012-1935 18752  View
219925 43793 CVE-2012-1935 52941  View
219926 43793 CVE-2012-1935 http://www.sourcefabric.org/en/newscoop/latestrelease/1141/Newscoop-355-and-Newscoop-4-RC4-security-releases.htm  View
219927 43793 CVE-2012-1935 newscoop-multiple-xss(74781)  View
219928 43793 CVE-2012-1935 https://www.htbridge.com/advisory/HTB23084  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28214 JVNDB-2012-003921 Newscoop におけるクロスサイトスクリプティングの脆弱性 Newscoop には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-1935 55173 CVE-2012-1935 43793 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003921.html 2012-04-05 2012-08-29 View