NVD

Id
46224  
Name
CVE-2012-4968  
Description
Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe 2.3.x before 2.3.13 and 2.4.x before 2.4.7 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted string to the AbsoluteLinks, (2) BigSummary, (3) ContextSummary, (4) EscapeXML, (5) FirstParagraph, (6) FirstSentence, (7) Initial, (8) LimitCharacters, (9) LimitSentences, (10) LimitWordCount, (11) LimitWordCountXML, (12) Lower, (13) LowerCase, (14) NoHTML, (15) Summary, (16) Upper, (17) UpperCase, or (18) URL method in a template, different vectors than CVE-2012-0976.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-09-17  
Modified Date
2012-09-18  
Seq
2012-4968  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
231765 46224 CVE-2012-4968 http://doc.silverstripe.org/framework/en/trunk/changelogs/2.3.13  View
231766 46224 CVE-2012-4968 http://doc.silverstripe.org/framework/en/trunk/changelogs/2.4.7  View
231767 46224 CVE-2012-4968 [oss-security] 20120430 CVE-request: SilverStripe before 2.4.4  View
231768 46224 CVE-2012-4968 [oss-security] 20120430 Re: CVE-request: SilverStripe before 2.4.4  View
231769 46224 CVE-2012-4968 https://github.com/silverstripe/sapphire/commit/0085876  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28738 JVNDB-2012-004445 SilverStripe におけるクロスサイトスクリプティングの脆弱性 SilverStripe には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-4968 58206 CVE-2012-4968 46224 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004445.html 2012-02-01 2012-09-20 View