Lucene search

[email protected]CVE-2012-5164

HistorySep 26, 2012 - 12:55 a.m.

CVE-2012-5164

2012-09-2600:55:01

CWE-79

[email protected]

web.nvd.nist.gov

cve-2012-5164

xss

cross-site scripting

fork cms

security vulnerability

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.1%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the term parameter to (1) autocomplete.php, (2) search/ajax/autosuggest.php, (3) livesuggest.php, or (4) save.php in frontend/modules/search/ajax.

Affected configurations

NVD

Node

fork-cmsfork_cmsRange≤3.2.6

fork-cmsfork_cmsMatch2.0.1

fork-cmsfork_cmsMatch2.0.2

fork-cmsfork_cmsMatch2.1.0

fork-cmsfork_cmsMatch2.2.0

fork-cmsfork_cmsMatch2.3.0

fork-cmsfork_cmsMatch2.3.1

fork-cmsfork_cmsMatch2.4.0

fork-cmsfork_cmsMatch2.4.1

fork-cmsfork_cmsMatch2.5.1

fork-cmsfork_cmsMatch2.5.2

fork-cmsfork_cmsMatch2.6.0

fork-cmsfork_cmsMatch2.6.1

fork-cmsfork_cmsMatch2.6.2

fork-cmsfork_cmsMatch2.6.3

fork-cmsfork_cmsMatch2.6.4

fork-cmsfork_cmsMatch2.6.5

fork-cmsfork_cmsMatch2.6.6

fork-cmsfork_cmsMatch2.6.7

fork-cmsfork_cmsMatch2.6.8

fork-cmsfork_cmsMatch2.6.9

fork-cmsfork_cmsMatch2.6.10

fork-cmsfork_cmsMatch2.6.11

fork-cmsfork_cmsMatch2.6.12

fork-cmsfork_cmsMatch2.6.13

fork-cmsfork_cmsMatch3.0.0

fork-cmsfork_cmsMatch3.1.0

fork-cmsfork_cmsMatch3.1.1

fork-cmsfork_cmsMatch3.1.2

fork-cmsfork_cmsMatch3.1.3

fork-cmsfork_cmsMatch3.1.4

fork-cmsfork_cmsMatch3.1.5

fork-cmsfork_cmsMatch3.1.6

fork-cmsfork_cmsMatch3.1.7

fork-cmsfork_cmsMatch3.1.8

fork-cmsfork_cmsMatch3.1.9

fork-cmsfork_cmsMatch3.2.0

fork-cmsfork_cmsMatch3.2.1

fork-cmsfork_cmsMatch3.2.2

fork-cmsfork_cmsMatch3.2.3

fork-cmsfork_cmsMatch3.2.4

fork-cmsfork_cmsMatch3.2.5

CPENameOperatorVersion
fork-cms:fork_cmsfork-cms fork cmsle3.2.6
fork-cms:fork_cmsfork-cms fork cmseq2.0.1
fork-cms:fork_cmsfork-cms fork cmseq2.0.2
fork-cms:fork_cmsfork-cms fork cmseq2.1.0
fork-cms:fork_cmsfork-cms fork cmseq2.2.0
fork-cms:fork_cmsfork-cms fork cmseq2.3.0
fork-cms:fork_cmsfork-cms fork cmseq2.3.1
fork-cms:fork_cmsfork-cms fork cmseq2.4.0
fork-cms:fork_cmsfork-cms fork cmseq2.4.1
fork-cms:fork_cmsfork-cms fork cmseq2.5.1

CPE	Name	Operator	Version
fork-cms:fork_cms	fork-cms fork cms	le	3.2.6
fork-cms:fork_cms	fork-cms fork cms	eq	2.0.1
fork-cms:fork_cms	fork-cms fork cms	eq	2.0.2
fork-cms:fork_cms	fork-cms fork cms	eq	2.1.0
fork-cms:fork_cms	fork-cms fork cms	eq	2.2.0
fork-cms:fork_cms	fork-cms fork cms	eq	2.3.0
fork-cms:fork_cms	fork-cms fork cms	eq	2.3.1
fork-cms:fork_cms	fork-cms fork cms	eq	2.4.0
fork-cms:fork_cms	fork-cms fork cms	eq	2.4.1
fork-cms:fork_cms	fork-cms fork cms	eq	2.5.1

Rows per page:

1-10 of 421

References

www.fork-cms.com/blog/detail/fork-cms-3-2-7-released

exchange.xforce.ibmcloud.com/vulnerabilities/78957

github.com/forkcms/forkcms/commit/03e8f5b53f193a87116b3875eec39769d5c07114

github.com/forkcms/forkcms/commit/641e27bf1e9a7e320d6856399a7c274934bb351e

github.com/forkcms/forkcms/pull/247

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.1%

JSON

Related for CVE-2012-5164

nvd1 prion1 cvelist1