Lucene search

[email protected]CVE-2012-5569

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-5569

2022-10-0316:15:30

CWE-79

[email protected]

web.nvd.nist.gov

cve-2012-5569

webmail

xss

drupal

security vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.0%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal allow remote attackers to inject arbitrary web script or HTML via a (1) page title or (2) crafted email message.

Affected configurations

NVD

Node

basic_webmail_projectbasic_webmailMatch6.x-1.1

jason_flattbasic_webmailMatch6.x-1.0

jason_flattbasic_webmailMatch6.x-1.xdev

AND

drupaldrupalMatch-

CPENameOperatorVersion
basic_webmail_project:basic_webmailbasic webmail project basic webmaileq6.x-1.1
jason_flatt:basic_webmailjason flatt basic webmaileq6.x-1.0
jason_flatt:basic_webmailjason flatt basic webmaileq6.x-1.x

CPE	Name	Operator	Version
basic_webmail_project:basic_webmail	basic webmail project basic webmail	eq	6.x-1.1
jason_flatt:basic_webmail	jason flatt basic webmail	eq	6.x-1.0
jason_flatt:basic_webmail	jason flatt basic webmail	eq	6.x-1.x

References

drupal.org/node/1808852

www.openwall.com/lists/oss-security/2012/11/20/4

www.openwall.com/lists/oss-security/2012/11/27/2

drupal.org/node/1808616

Social References

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.0%

JSON

Related for CVE-2012-5569

prion1 nvd1 cvelist1 drupal1