Lucene search

[email protected]CVE-2012-0974

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-0974

2022-10-0316:15:39

CWE-79

[email protected]

web.nvd.nist.gov

cve-2012-0974

xss

osclass

security

vulnerability

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

85.7%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the getParam function in oc-includes/osclass/core/Params.php in OSClass before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via the (1) sCity, (2) sPattern, (3) sPriceMax, and (4) sPriceMin parameters in a search action to index.php.

Affected configurations

NVD

Node

juan_ramonosclassRange≤2.3.4

juan_ramonosclassMatch1.1

juan_ramonosclassMatch1.1rc

juan_ramonosclassMatch1.2alpha

juan_ramonosclassMatch1.2beta

juan_ramonosclassMatch1.2delta

juan_ramonosclassMatch2.0

juan_ramonosclassMatch2.0rc

juan_ramonosclassMatch2.0.1

juan_ramonosclassMatch2.0.2

juan_ramonosclassMatch2.0.3

juan_ramonosclassMatch2.1

juan_ramonosclassMatch2.1.1

juan_ramonosclassMatch2.2

juan_ramonosclassMatch2.2.1

juan_ramonosclassMatch2.2.2

juan_ramonosclassMatch2.2.3

juan_ramonosclassMatch2.3

juan_ramonosclassMatch2.3.1

juan_ramonosclassMatch2.3.2

juan_ramonosclassMatch2.3.3

CPENameOperatorVersion
juan_ramon:osclassjuan ramon osclassle2.3.4
juan_ramon:osclassjuan ramon osclasseq1.1
juan_ramon:osclassjuan ramon osclasseq1.2
juan_ramon:osclassjuan ramon osclasseq2.0
juan_ramon:osclassjuan ramon osclasseq2.0.1
juan_ramon:osclassjuan ramon osclasseq2.0.2
juan_ramon:osclassjuan ramon osclasseq2.0.3
juan_ramon:osclassjuan ramon osclasseq2.1
juan_ramon:osclassjuan ramon osclasseq2.1.1
juan_ramon:osclassjuan ramon osclasseq2.2

CPE	Name	Operator	Version
juan_ramon:osclass	juan ramon osclass	le	2.3.4
juan_ramon:osclass	juan ramon osclass	eq	1.1
juan_ramon:osclass	juan ramon osclass	eq	1.2
juan_ramon:osclass	juan ramon osclass	eq	2.0
juan_ramon:osclass	juan ramon osclass	eq	2.0.1
juan_ramon:osclass	juan ramon osclass	eq	2.0.2
juan_ramon:osclass	juan ramon osclass	eq	2.0.3
juan_ramon:osclass	juan ramon osclass	eq	2.1
juan_ramon:osclass	juan ramon osclass	eq	2.1.1
juan_ramon:osclass	juan ramon osclass	eq	2.2

Rows per page:

1-10 of 171

References

archives.neohapsis.com/archives/bugtraq/2012-01/0157.html

osclass.org/2012/01/16/osclass-2-3-5/

secunia.com/advisories/47697

www.securityfocus.com/bid/51662

github.com/osclass/OSClass/commit/ff7ef8a97301aaaf6a97fe46c2c27981a86b4e2f#diff-73

www.htbridge.ch/advisory/multiple_vulnerabilities_in_osclass.html

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

85.7%

JSON

Related for CVE-2012-0974

prion1 nvd1 cvelist1 htbridge1 openvas1