NVD

Id
44043  
Name
CVE-2012-2209  
Description
Multiple cross-site scripting (XSS) vulnerabilities in admin.php in Piwigo before 2.3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) section parameter in the configuration module, (2) installstatus parameter in the languages_new module, or (3) theme parameter in the theme module.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-08-14  
Modified Date
2012-12-18  
Seq
2012-2209  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
221354 44043 CVE-2012-2209 20120425 Multiple vulnerabilities in Piwigo  View
221355 44043 CVE-2012-2209 http://piwigo.org/bugs/view.php?id=2607  View
221356 44043 CVE-2012-2209 http://piwigo.org/forum/viewtopic.php?id=19173  View
221357 44043 CVE-2012-2209 http://piwigo.org/releases/2.3.4  View
221358 44043 CVE-2012-2209 18782  View
221359 44043 CVE-2012-2209 53245  View
221360 44043 CVE-2012-2209 piwigo-multiple-xss(75186)  View
221361 44043 CVE-2012-2209 https://www.htbridge.com/advisory/HTB23085  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27960 JVNDB-2012-003667 Piwigo の admin.php におけるクロスサイトスクリプティングの脆弱性 Piwigo の admin.php には、クロスサイトスクリプティングの脆弱性の脆弱性が存在します。 CVE-2012-2209 55447 CVE-2012-2209 44043 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003667.html 2012-04-04 2012-08-17 View