Lucene search

MitreCVE-2012-5226

HistoryOct 01, 2012 - 8:55 p.m.

CVE-2012-5226

2012-10-0120:55:04

CWE-79

mitre

web.nvd.nist.gov

cve

2012

5226

cross-site scripting

xss

vulnerabilities

peel shopping

remote attackers

web script

html

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.002

Percentile

55.8%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Peel SHOPPING 2.8 and 2.9 allow remote attackers to inject arbitrary web script or HTML via the (1) motclef parameter to achat/recherche.php or (2) PATH_INFO to index.php.

Affected configurations

Nvd

Node

peelpeel_shoppingMatch2.8

peelpeel_shoppingMatch2.9

VendorProductVersionCPE
peelpeel_shopping2.8cpe:2.3:a:peel:peel_shopping:2.8:*:*:*:*:*:*:*
peelpeel_shopping2.9cpe:2.3:a:peel:peel_shopping:2.9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
peel	peel_shopping	2.8	cpe:2.3:a:peel:peel_shopping:2.8:::::::*
peel	peel_shopping	2.9	cpe:2.3:a:peel:peel_shopping:2.9:::::::*

References

www.exploit-db.com/exploits/18422

www.securityfocus.com/bid/51700

exchange.xforce.ibmcloud.com/vulnerabilities/72765

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.002

Percentile

55.8%

JSON

Related for CVE-2012-5226