Lucene search
MitreCVE-2012-2909HistoryMay 21, 2012 - 6:55 p.m.
CVE-2012-2909
2012-05-2118:55:07
CWE-79
mitre
web.nvd.nist.gov
114
cve-2012-2909
cross-site scripting
xss
viscacha
security vulnerabilities
nvd
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.002
Percentile
60.3%
Multiple cross-site scripting (XSS) vulnerabilities in Viscacha 0.8.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) text field in the Private Messages System, (2) Bad Word field in Zensur, or (3) Portal or (4) Topic field in Kommentar.
Affected configurations
Node
viscachaviscachaMatch0.8.1.1
Related
nvd
nvd
CVE-2012-2909
2012-05-21 18:55:07
prion
prion
Cross site scripting
2012-05-21 18:55:00
cvelist
cvelist
CVE-2012-2909
2012-05-21 18:00:00
exploitdb
exploitdb
Viscacha Forum CMS 0.8.1.1 - Multiple Vulnerabilities
2012-05-13 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.002
Percentile
60.3%
Related for CVE-2012-2909