NVD

Id
46244  
Name
CVE-2012-4995  
Description
Cross-site scripting (XSS) vulnerability in admin/userrighthandling.php in LimeSurvey before 1.91+ Build 120224 allows remote attackers to inject arbitrary web script or HTML via the full_name parameter in a moduser action to admin/admin.php. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-09-19  
Modified Date
2012-09-20  
Seq
2012-4995  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
231831 46244 CVE-2012-4995 http://freecode.com/projects/limesurvey/releases/342070  View
231832 46244 CVE-2012-4995 http://www.limesurvey.org/en/stable-release  View
231833 46244 CVE-2012-4995 limesurvey-fullname-xss(73563)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28778 JVNDB-2012-004485 LimeSurvey の admin/userrighthandling.php におけるクロスサイトスクリプティングの脆弱性 LimeSurvey の admin/userrighthandling.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-4995 58233 CVE-2012-4995 46244 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004485.html 2012-09-19 2012-09-21 View