Lucene search
HistoryApr 11, 2012 - 10:39 a.m.
CVE-2012-1992
cve-2012-1992
cross-site scripting
xss vulnerability
cms made simple
admin
edit user
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
49.1%
Cross-site scripting (XSS) vulnerability in admin/edituser.php in CMS Made Simple 1.10.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the email parameter (aka the Email Address field in the Edit User template).
Affected configurations
Node
cmsmadesimplecms_made_simpleRange≤1.10.3
ORcmsmadesimplecms_made_simpleMatch0.1
ORcmsmadesimplecms_made_simpleMatch0.2
ORcmsmadesimplecms_made_simpleMatch0.2.1
ORcmsmadesimplecms_made_simpleMatch0.3
ORcmsmadesimplecms_made_simpleMatch0.3.1
ORcmsmadesimplecms_made_simpleMatch0.3.2
ORcmsmadesimplecms_made_simpleMatch0.4
ORcmsmadesimplecms_made_simpleMatch0.4.1
ORcmsmadesimplecms_made_simpleMatch0.5
ORcmsmadesimplecms_made_simpleMatch0.5.1
ORcmsmadesimplecms_made_simpleMatch0.6
ORcmsmadesimplecms_made_simpleMatch0.6.1
ORcmsmadesimplecms_made_simpleMatch0.6.2
ORcmsmadesimplecms_made_simpleMatch0.6.3
ORcmsmadesimplecms_made_simpleMatch0.7
ORcmsmadesimplecms_made_simpleMatch0.7.1
ORcmsmadesimplecms_made_simpleMatch0.7.2
ORcmsmadesimplecms_made_simpleMatch0.7.3
ORcmsmadesimplecms_made_simpleMatch0.8
ORcmsmadesimplecms_made_simpleMatch0.8.1
ORcmsmadesimplecms_made_simpleMatch0.8.2
ORcmsmadesimplecms_made_simpleMatch0.9
ORcmsmadesimplecms_made_simpleMatch0.9.1
ORcmsmadesimplecms_made_simpleMatch0.9.2
ORcmsmadesimplecms_made_simpleMatch0.10
ORcmsmadesimplecms_made_simpleMatch0.10.1
ORcmsmadesimplecms_made_simpleMatch0.10.2
ORcmsmadesimplecms_made_simpleMatch0.10.3
ORcmsmadesimplecms_made_simpleMatch0.10.4
ORcmsmadesimplecms_made_simpleMatch0.11
ORcmsmadesimplecms_made_simpleMatch0.11beta5
ORcmsmadesimplecms_made_simpleMatch0.11beta6
ORcmsmadesimplecms_made_simpleMatch0.11.1
ORcmsmadesimplecms_made_simpleMatch0.11.2
ORcmsmadesimplecms_made_simpleMatch0.12
ORcmsmadesimplecms_made_simpleMatch0.12beta1
ORcmsmadesimplecms_made_simpleMatch0.12beta2
ORcmsmadesimplecms_made_simpleMatch0.12.1
ORcmsmadesimplecms_made_simpleMatch0.12.2
ORcmsmadesimplecms_made_simpleMatch0.13
ORcmsmadesimplecms_made_simpleMatch0.13beta1
ORcmsmadesimplecms_made_simpleMatch0.13beta2
ORcmsmadesimplecms_made_simpleMatch0.13beta3
ORcmsmadesimplecms_made_simpleMatch1.0
ORcmsmadesimplecms_made_simpleMatch1.0beta1
ORcmsmadesimplecms_made_simpleMatch1.0beta2
ORcmsmadesimplecms_made_simpleMatch1.0beta3
ORcmsmadesimplecms_made_simpleMatch1.0beta4
ORcmsmadesimplecms_made_simpleMatch1.0beta5
ORcmsmadesimplecms_made_simpleMatch1.0beta6
ORcmsmadesimplecms_made_simpleMatch1.0.1
ORcmsmadesimplecms_made_simpleMatch1.0.2
ORcmsmadesimplecms_made_simpleMatch1.0.3
ORcmsmadesimplecms_made_simpleMatch1.0.4
ORcmsmadesimplecms_made_simpleMatch1.0.5
ORcmsmadesimplecms_made_simpleMatch1.0.6
ORcmsmadesimplecms_made_simpleMatch1.0.7
ORcmsmadesimplecms_made_simpleMatch1.0.8
ORcmsmadesimplecms_made_simpleMatch1.1
ORcmsmadesimplecms_made_simpleMatch1.1rc1
ORcmsmadesimplecms_made_simpleMatch1.1rc2
ORcmsmadesimplecms_made_simpleMatch1.1rc3
ORcmsmadesimplecms_made_simpleMatch1.1.1
ORcmsmadesimplecms_made_simpleMatch1.1.2
ORcmsmadesimplecms_made_simpleMatch1.1.3
ORcmsmadesimplecms_made_simpleMatch1.1.3.1
ORcmsmadesimplecms_made_simpleMatch1.1.4
ORcmsmadesimplecms_made_simpleMatch1.1.4.1
ORcmsmadesimplecms_made_simpleMatch1.2
ORcmsmadesimplecms_made_simpleMatch1.2beta1
ORcmsmadesimplecms_made_simpleMatch1.2beta2
ORcmsmadesimplecms_made_simpleMatch1.2beta3
ORcmsmadesimplecms_made_simpleMatch1.2rc1
ORcmsmadesimplecms_made_simpleMatch1.2.1
ORcmsmadesimplecms_made_simpleMatch1.2.2
ORcmsmadesimplecms_made_simpleMatch1.2.3
ORcmsmadesimplecms_made_simpleMatch1.2.4
ORcmsmadesimplecms_made_simpleMatch1.2.5
ORcmsmadesimplecms_made_simpleMatch1.3
ORcmsmadesimplecms_made_simpleMatch1.3beta1
ORcmsmadesimplecms_made_simpleMatch1.3beta2
ORcmsmadesimplecms_made_simpleMatch1.3.1
ORcmsmadesimplecms_made_simpleMatch1.4
ORcmsmadesimplecms_made_simpleMatch1.4beta1
ORcmsmadesimplecms_made_simpleMatch1.4beta2
ORcmsmadesimplecms_made_simpleMatch1.4.1
ORcmsmadesimplecms_made_simpleMatch1.5
ORcmsmadesimplecms_made_simpleMatch1.5beta1
ORcmsmadesimplecms_made_simpleMatch1.5.1
ORcmsmadesimplecms_made_simpleMatch1.5.2
ORcmsmadesimplecms_made_simpleMatch1.5.3
ORcmsmadesimplecms_made_simpleMatch1.5.4
ORcmsmadesimplecms_made_simpleMatch1.6
ORcmsmadesimplecms_made_simpleMatch1.6.1
ORcmsmadesimplecms_made_simpleMatch1.6.2
ORcmsmadesimplecms_made_simpleMatch1.6.3
ORcmsmadesimplecms_made_simpleMatch1.6.4
ORcmsmadesimplecms_made_simpleMatch1.6.5
ORcmsmadesimplecms_made_simpleMatch1.6.6
ORcmsmadesimplecms_made_simpleMatch1.6.7
ORcmsmadesimplecms_made_simpleMatch1.6.8
ORcmsmadesimplecms_made_simpleMatch1.7
ORcmsmadesimplecms_made_simpleMatch1.7.1
ORcmsmadesimplecms_made_simpleMatch1.8
ORcmsmadesimplecms_made_simpleMatch1.8.1
ORcmsmadesimplecms_made_simpleMatch1.8.2
ORcmsmadesimplecms_made_simpleMatch1.9
ORcmsmadesimplecms_made_simpleMatch1.9.1
ORcmsmadesimplecms_made_simpleMatch1.9.2
ORcmsmadesimplecms_made_simpleMatch1.9.3
ORcmsmadesimplecms_made_simpleMatch1.9.4
ORcmsmadesimplecms_made_simpleMatch1.9.4.1
ORcmsmadesimplecms_made_simpleMatch1.9.4.2
ORcmsmadesimplecms_made_simpleMatch1.9.4.3
ORcmsmadesimplecms_made_simpleMatch1.10
ORcmsmadesimplecms_made_simpleMatch1.10.1
ORcmsmadesimplecms_made_simpleMatch1.10.2
Related
packetstorm
packetstorm
CMS Made Simple 1.10.3 Cross Site Scripting
2012-04-02 00:00:00
prion
prion
Cross site scripting
2012-04-11 10:39:00
cvelist
cvelist
CVE-2012-1992
2012-04-11 10:00:00
nvd
nvd
CVE-2012-1992
2012-04-11 10:39:27
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
49.1%
Related for CVE-2012-1992