Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2012-4968
HistorySep 17, 2012 - 5:55 p.m.

CVE-2012-4968

2012-09-1717:55:03
CWE-79
mitre
web.nvd.nist.gov
25
cve-2012-4968
cross-site scripting
xss
silverstripe
remote attackers
web script
html
vulnerabilities
security
nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.003

Percentile

70.6%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe 2.3.x before 2.3.13 and 2.4.x before 2.4.7 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted string to the AbsoluteLinks, (2) BigSummary, (3) ContextSummary, (4) EscapeXML, (5) FirstParagraph, (6) FirstSentence, (7) Initial, (8) LimitCharacters, (9) LimitSentences, (10) LimitWordCount, (11) LimitWordCountXML, (12) Lower, (13) LowerCase, (14) NoHTML, (15) Summary, (16) Upper, (17) UpperCase, or (18) URL method in a template, different vectors than CVE-2012-0976.

Affected configurations

Nvd
Node
silverstripesilverstripeMatch2.3.0
OR
silverstripesilverstripeMatch2.3.1
OR
silverstripesilverstripeMatch2.3.2
OR
silverstripesilverstripeMatch2.3.3
OR
silverstripesilverstripeMatch2.3.4
OR
silverstripesilverstripeMatch2.3.5
OR
silverstripesilverstripeMatch2.3.6
OR
silverstripesilverstripeMatch2.3.7
OR
silverstripesilverstripeMatch2.3.8
OR
silverstripesilverstripeMatch2.3.9
OR
silverstripesilverstripeMatch2.3.10
OR
silverstripesilverstripeMatch2.3.11
OR
silverstripesilverstripeMatch2.3.12
Node
silverstripesilverstripeMatch2.4.0
OR
silverstripesilverstripeMatch2.4.1
OR
silverstripesilverstripeMatch2.4.2
OR
silverstripesilverstripeMatch2.4.3
OR
silverstripesilverstripeMatch2.4.5
OR
silverstripesilverstripeMatch2.4.6
VendorProductVersionCPE
silverstripesilverstripe2.3.0cpe:2.3:a:silverstripe:silverstripe:2.3.0:*:*:*:*:*:*:*
silverstripesilverstripe2.3.1cpe:2.3:a:silverstripe:silverstripe:2.3.1:*:*:*:*:*:*:*
silverstripesilverstripe2.3.2cpe:2.3:a:silverstripe:silverstripe:2.3.2:*:*:*:*:*:*:*
silverstripesilverstripe2.3.3cpe:2.3:a:silverstripe:silverstripe:2.3.3:*:*:*:*:*:*:*
silverstripesilverstripe2.3.4cpe:2.3:a:silverstripe:silverstripe:2.3.4:*:*:*:*:*:*:*
silverstripesilverstripe2.3.5cpe:2.3:a:silverstripe:silverstripe:2.3.5:*:*:*:*:*:*:*
silverstripesilverstripe2.3.6cpe:2.3:a:silverstripe:silverstripe:2.3.6:*:*:*:*:*:*:*
silverstripesilverstripe2.3.7cpe:2.3:a:silverstripe:silverstripe:2.3.7:*:*:*:*:*:*:*
silverstripesilverstripe2.3.8cpe:2.3:a:silverstripe:silverstripe:2.3.8:*:*:*:*:*:*:*
silverstripesilverstripe2.3.9cpe:2.3:a:silverstripe:silverstripe:2.3.9:*:*:*:*:*:*:*
Rows per page:
1-10 of 191

Related

cvelist 2
prion 2
osv 1
github 1
nvd 2
cve 1
cvelist
cvelist
CVE-2012-4968
2012-09-17 17:00:00
CVE-2012-0976
2012-02-02 17:00:00
prion
prion
Cross site scripting
2012-09-17 17:55:00
Cross site scripting
2012-02-02 17:55:00
osv
osv
Silverstripe XSS Vulnerabilities
2022-05-17 05:22:19
github
github
Silverstripe XSS Vulnerabilities
2022-05-17 05:22:19
nvd
nvd
CVE-2012-4968
2012-09-17 17:55:03
CVE-2012-0976
2012-02-02 17:55:01
cve
cve
CVE-2012-0976
2012-02-02 17:55:01

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.003

Percentile

70.6%

JSON
Related for CVE-2012-4968
cvelist2prion2osv1github1nvd2cve1