Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-1066
HistoryFeb 14, 2012 - 12:00 a.m.

CVE-2012-1066

2012-02-1400:00:00
ubuntu.com
ubuntu.com
12

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.002

Percentile

57.6%

Cross-site scripting (XSS) vulnerability in the template module in
SmartyCMS 0.9.4 allows remote attackers to inject arbitrary web script or
HTML via the title bar.

Notes

Author Note
sbeattie needs triage to discover whether it only affects smartyCMS or the smarty template engine that smartyCMS is based on.

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.002

Percentile

57.6%

Related for UB:CVE-2012-1066