Lucene search

[email protected]CVE-2012-6556

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-6556

2022-10-0316:15:29

CWE-79

[email protected]

web.nvd.nist.gov

cve

2012

6556

xss

firstlastnames

vanilla forums

remote attack

injection

html

script

user parameter

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

77.9%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the FirstLastNames plugin 1.1.1 for Vanilla Forums allow remote attackers to inject arbitrary web script or HTML via the (1) User/FirstName or (2) User/LastName parameter to the edit user page. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD

Node

jspautschfirstlastnamesMatch1.1.1

CPENameOperatorVersion
jspautsch:firstlastnamesjspautsch firstlastnameseq1.1.1

CPE	Name	Operator	Version
jspautsch:firstlastnames	jspautsch firstlastnames	eq	1.1.1

References

secunia.com/advisories/49215

www.exploit-db.com/exploits/18912

www.henryhoggard.co.uk/security/197

www.securityfocus.com/bid/53637

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

77.9%

JSON

Related for CVE-2012-6556

nvd1 cvelist1 prion1