Lucene search

[email protected]NVD:CVE-2012-6112

HistoryJan 27, 2013 - 10:55 p.m.

CVE-2012-6112

2013-01-2722:55:04

CWE-264

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.6

Confidence

Low

EPSS

0.006

Percentile

79.3%

JSON

classes/GoogleSpell.php in the PHP Spellchecker (aka Google Spellchecker) addon before 2.0.6.1 for TinyMCE, as used in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 and other products, does not properly handle control characters, which allows remote attackers to trigger arbitrary outbound HTTP requests via a crafted string.

Affected configurations

Nvd

Node

tinymcespellchecker_phpMatch2.0

tinymcespellchecker_phpMatch2.0a1

tinymcespellchecker_phpMatch2.0a2

tinymcespellchecker_phpMatch2.0b1

tinymcespellchecker_phpMatch2.0b2

tinymcespellchecker_phpMatch2.0b3

tinymcespellchecker_phpMatch2.0rc1

tinymcespellchecker_phpMatch2.0.1

tinymcespellchecker_phpMatch2.0.2

tinymcespellchecker_phpMatch2.0.3

tinymcespellchecker_phpMatch2.0.6

Node

moodlemoodleMatch2.1.0

moodlemoodleMatch2.1.1

moodlemoodleMatch2.1.2

moodlemoodleMatch2.1.3

moodlemoodleMatch2.1.4

moodlemoodleMatch2.1.5

moodlemoodleMatch2.1.6

moodlemoodleMatch2.1.7

moodlemoodleMatch2.1.8

moodlemoodleMatch2.1.9

Node

moodlemoodleMatch2.2.0

moodlemoodleMatch2.2.1

moodlemoodleMatch2.2.2

moodlemoodleMatch2.2.3

moodlemoodleMatch2.2.4

moodlemoodleMatch2.2.5

moodlemoodleMatch2.2.6

Node

moodlemoodleMatch2.3.0

moodlemoodleMatch2.3.1

moodlemoodleMatch2.3.2

moodlemoodleMatch2.3.3

Node

moodlemoodleMatch2.4.0

VendorProductVersionCPE
tinymcespellchecker_php2.0cpe:2.3:a:tinymce:spellchecker_php:2.0:*:*:*:*:*:*:*
tinymcespellchecker_php2.0cpe:2.3:a:tinymce:spellchecker_php:2.0:a1:*:*:*:*:*:*
tinymcespellchecker_php2.0cpe:2.3:a:tinymce:spellchecker_php:2.0:a2:*:*:*:*:*:*
tinymcespellchecker_php2.0cpe:2.3:a:tinymce:spellchecker_php:2.0:b1:*:*:*:*:*:*
tinymcespellchecker_php2.0cpe:2.3:a:tinymce:spellchecker_php:2.0:b2:*:*:*:*:*:*
tinymcespellchecker_php2.0cpe:2.3:a:tinymce:spellchecker_php:2.0:b3:*:*:*:*:*:*
tinymcespellchecker_php2.0cpe:2.3:a:tinymce:spellchecker_php:2.0:rc1:*:*:*:*:*:*
tinymcespellchecker_php2.0.1cpe:2.3:a:tinymce:spellchecker_php:2.0.1:*:*:*:*:*:*:*
tinymcespellchecker_php2.0.2cpe:2.3:a:tinymce:spellchecker_php:2.0.2:*:*:*:*:*:*:*
tinymcespellchecker_php2.0.3cpe:2.3:a:tinymce:spellchecker_php:2.0.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tinymce	spellchecker_php	2.0	cpe:2.3:a:tinymce:spellchecker_php:2.0:::::::*
tinymce	spellchecker_php	2.0	cpe:2.3:a:tinymce:spellchecker_php:2.0:a1::::::
tinymce	spellchecker_php	2.0	cpe:2.3:a:tinymce:spellchecker_php:2.0:a2::::::
tinymce	spellchecker_php	2.0	cpe:2.3:a:tinymce:spellchecker_php:2.0:b1::::::
tinymce	spellchecker_php	2.0	cpe:2.3:a:tinymce:spellchecker_php:2.0:b2::::::
tinymce	spellchecker_php	2.0	cpe:2.3:a:tinymce:spellchecker_php:2.0:b3::::::
tinymce	spellchecker_php	2.0	cpe:2.3:a:tinymce:spellchecker_php:2.0:rc1::::::
tinymce	spellchecker_php	2.0.1	cpe:2.3:a:tinymce:spellchecker_php:2.0.1:::::::*
tinymce	spellchecker_php	2.0.2	cpe:2.3:a:tinymce:spellchecker_php:2.0.2:::::::*
tinymce	spellchecker_php	2.0.3	cpe:2.3:a:tinymce:spellchecker_php:2.0.3:::::::*