NVD

Id
46935  
Name
CVE-2012-5919  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Havalite 1.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) find or (2) replace fields to havalite/findReplace.php; (3) username parameter to havalite/hava_login.php, (4) the Edit Article module, or (5) hava_post.php in the postAuthor module; (6) postId parameter to hava_post.php; (7) userId parameter to hava_user.php; or (8) linkId parameter to hava_link.php.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-11-19  
Modified Date
2012-12-18  
Seq
2012-5919  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
235079 46935 CVE-2012-5919 http://packetstormsecurity.org/files/112089/Havalite-CMS-1.0.4-Cross-Site-Scripting.html  View
235080 46935 CVE-2012-5919 http://www.vulnerability-lab.com/get_content.php?id=520  View
235081 46935 CVE-2012-5919 havalite-multiple-xss(75082)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29730 JVNDB-2012-005437 Havalite におけるクロスサイトスクリプティングの脆弱性 Havalite には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-5919 59157 CVE-2012-5919 46935 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005437.html 2012-11-19 2012-11-20 View