Lucene search

CVE-2012-6621

🗓️ 16 Jan 2014 21:08:55Reported by mitreType

cve🔗 web.nvd.nist.gov👁 32 Views🌐 WEB

CVE-2012-6621 Multiple XSS vulnerabilities in GetSimple CMS 3.1 and earlie

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 16
Prion	Cross site scripting	16 Jan 201421:55	–	prion
Prion	Cross site scripting	17 Jan 201415:18	–	prion
Prion	Cross site scripting	2 Jan 202021:15	–	prion
NVD	CVE-2012-6621	16 Jan 201421:55	–	nvd
NVD	CVE-2013-1420	2 Jan 202021:15	–	nvd
NVD	CVE-2013-7243	17 Jan 201415:18	–	nvd
Exploit DB	GetSimple CMS 3.1 admin/upload.php path Parameter XSS	12 May 201200:00	–	exploitdb
Exploit DB	GetSimple CMS 3.1 admin/pages.php error Parameter Reflected XSS	12 May 201200:00	–	exploitdb
Exploit DB	GetSimple CMS 3.1 admin/theme.php err Parameter Reflected XSS	12 May 201200:00	–	exploitdb
Exploit DB	GetSimple CMS 3.1 admin/index.php Multiple Parameter Reflected XSS	12 May 201200:00	–	exploitdb

Nvd

Node

get-simple getsimple_cmsRange≤3.2.3

get-simple getsimple_cmsMatch1.0

get-simple getsimple_cmsMatch1.1

get-simple getsimple_cmsMatch1.2

get-simple getsimple_cmsMatch1.3

get-simple getsimple_cmsMatch1.4

get-simple getsimple_cmsMatch1.5

get-simple getsimple_cmsMatch1.6

get-simple getsimple_cmsMatch1.7

get-simple getsimple_cmsMatch1.25

get-simple getsimple_cmsMatch1.71

get-simple getsimple_cmsMatch2.0

get-simple getsimple_cmsMatch2.01

get-simple getsimple_cmsMatch2.03

get-simple getsimple_cmsMatch2.03.1

get-simple getsimple_cmsMatch3.0

get-simple getsimple_cmsMatch3.1

get-simple getsimple_cmsMatch3.1.1

get-simple getsimple_cmsMatch3.1.2

get-simple getsimple_cmsMatch3.2

get-simple getsimple_cmsMatch3.2.1

get-simple getsimple_cmsMatch3.2.2

Source	Link
vulnerability-lab	www.vulnerability-lab.com/get_content.php
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/75535
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/75534
secunia	www.secunia.com/advisories/49137
packetstormsecurity	www.packetstormsecurity.com/files/124711
packetstormsecurity	www.packetstormsecurity.org/files/112643/GetSimple-CMS-3.1-Cross-Site-Scripting.html
securityfocus	www.securityfocus.com/bid/53501

Parameter	Position	Path	Description	CWE
err	query param	/getsimple/admin/theme.php	Reflected XSS vulnerability through err parameter allowing arbitrary HTML and script injection.	CWE-79
error	query param	/getsimple/admin/pages.php	Reflected XSS vulnerability through error parameter allowing arbitrary HTML and script injection.	CWE-79
success	query param	/getsimple/admin/index.php	Multiple reflected XSS vulnerabilities through success and err parameters allowing arbitrary HTML and script injection.	CWE-79
err	query param	/getsimple/admin/index.php	Multiple reflected XSS vulnerabilities through success and err parameters allowing arbitrary HTML and script injection.	CWE-79
path	query param	/getsimple/admin/upload.php	XSS vulnerability through path parameter allowing arbitrary HTML and script injection.	CWE-79

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 Jan 2014 21:55Current

5.9Medium risk

Vulners AI Score5.9

CVSS24.3

EPSS0.00475

CWE-79