Lucene search

[email protected]NVD:CVE-2012-5164

HistorySep 26, 2012 - 12:55 a.m.

CVE-2012-5164

2012-09-2600:55:01

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.003

Percentile

70.1%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the term parameter to (1) autocomplete.php, (2) search/ajax/autosuggest.php, (3) livesuggest.php, or (4) save.php in frontend/modules/search/ajax.

Affected configurations

Nvd

Node

fork-cmsfork_cmsRange≤3.2.6

fork-cmsfork_cmsMatch2.0.1

fork-cmsfork_cmsMatch2.0.2

fork-cmsfork_cmsMatch2.1.0

fork-cmsfork_cmsMatch2.2.0

fork-cmsfork_cmsMatch2.3.0

fork-cmsfork_cmsMatch2.3.1

fork-cmsfork_cmsMatch2.4.0

fork-cmsfork_cmsMatch2.4.1

fork-cmsfork_cmsMatch2.5.1

fork-cmsfork_cmsMatch2.5.2

fork-cmsfork_cmsMatch2.6.0

fork-cmsfork_cmsMatch2.6.1

fork-cmsfork_cmsMatch2.6.2

fork-cmsfork_cmsMatch2.6.3

fork-cmsfork_cmsMatch2.6.4

fork-cmsfork_cmsMatch2.6.5

fork-cmsfork_cmsMatch2.6.6

fork-cmsfork_cmsMatch2.6.7

fork-cmsfork_cmsMatch2.6.8

fork-cmsfork_cmsMatch2.6.9

fork-cmsfork_cmsMatch2.6.10

fork-cmsfork_cmsMatch2.6.11

fork-cmsfork_cmsMatch2.6.12

fork-cmsfork_cmsMatch2.6.13

fork-cmsfork_cmsMatch3.0.0

fork-cmsfork_cmsMatch3.1.0

fork-cmsfork_cmsMatch3.1.1

fork-cmsfork_cmsMatch3.1.2

fork-cmsfork_cmsMatch3.1.3

fork-cmsfork_cmsMatch3.1.4

fork-cmsfork_cmsMatch3.1.5

fork-cmsfork_cmsMatch3.1.6

fork-cmsfork_cmsMatch3.1.7

fork-cmsfork_cmsMatch3.1.8

fork-cmsfork_cmsMatch3.1.9

fork-cmsfork_cmsMatch3.2.0

fork-cmsfork_cmsMatch3.2.1

fork-cmsfork_cmsMatch3.2.2

fork-cmsfork_cmsMatch3.2.3

fork-cmsfork_cmsMatch3.2.4

fork-cmsfork_cmsMatch3.2.5

VendorProductVersionCPE
fork-cmsfork_cms*cpe:2.3:a:fork-cms:fork_cms:*:*:*:*:*:*:*:*
fork-cmsfork_cms2.0.1cpe:2.3:a:fork-cms:fork_cms:2.0.1:*:*:*:*:*:*:*
fork-cmsfork_cms2.0.2cpe:2.3:a:fork-cms:fork_cms:2.0.2:*:*:*:*:*:*:*
fork-cmsfork_cms2.1.0cpe:2.3:a:fork-cms:fork_cms:2.1.0:*:*:*:*:*:*:*
fork-cmsfork_cms2.2.0cpe:2.3:a:fork-cms:fork_cms:2.2.0:*:*:*:*:*:*:*
fork-cmsfork_cms2.3.0cpe:2.3:a:fork-cms:fork_cms:2.3.0:*:*:*:*:*:*:*
fork-cmsfork_cms2.3.1cpe:2.3:a:fork-cms:fork_cms:2.3.1:*:*:*:*:*:*:*
fork-cmsfork_cms2.4.0cpe:2.3:a:fork-cms:fork_cms:2.4.0:*:*:*:*:*:*:*
fork-cmsfork_cms2.4.1cpe:2.3:a:fork-cms:fork_cms:2.4.1:*:*:*:*:*:*:*
fork-cmsfork_cms2.5.1cpe:2.3:a:fork-cms:fork_cms:2.5.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
fork-cms	fork_cms	*	cpe:2.3:a:fork-cms:fork_cms::::::::
fork-cms	fork_cms	2.0.1	cpe:2.3:a:fork-cms:fork_cms:2.0.1:::::::*
fork-cms	fork_cms	2.0.2	cpe:2.3:a:fork-cms:fork_cms:2.0.2:::::::*
fork-cms	fork_cms	2.1.0	cpe:2.3:a:fork-cms:fork_cms:2.1.0:::::::*
fork-cms	fork_cms	2.2.0	cpe:2.3:a:fork-cms:fork_cms:2.2.0:::::::*
fork-cms	fork_cms	2.3.0	cpe:2.3:a:fork-cms:fork_cms:2.3.0:::::::*
fork-cms	fork_cms	2.3.1	cpe:2.3:a:fork-cms:fork_cms:2.3.1:::::::*
fork-cms	fork_cms	2.4.0	cpe:2.3:a:fork-cms:fork_cms:2.4.0:::::::*
fork-cms	fork_cms	2.4.1	cpe:2.3:a:fork-cms:fork_cms:2.4.1:::::::*
fork-cms	fork_cms	2.5.1	cpe:2.3:a:fork-cms:fork_cms:2.5.1:::::::*

Rows per page:

1-10 of 421

References

www.fork-cms.com/blog/detail/fork-cms-3-2-7-released

exchange.xforce.ibmcloud.com/vulnerabilities/78957

github.com/forkcms/forkcms/commit/03e8f5b53f193a87116b3875eec39769d5c07114

github.com/forkcms/forkcms/commit/641e27bf1e9a7e320d6856399a7c274934bb351e

github.com/forkcms/forkcms/pull/247

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.003

Percentile

70.1%

JSON

Related for NVD:CVE-2012-5164

cve1 prion1 cvelist1