Lucene search
MitreCVE-2012-5914HistoryNov 17, 2012 - 9:55 p.m.
CVE-2012-5914
2012-11-1721:55:06
CWE-79
mitre
web.nvd.nist.gov
19
cve
2012
5914
xss
vulnerabilities
neocrome seditio
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.003
Percentile
69.0%
Multiple cross-site scripting (XSS) vulnerabilities in the sed_import function in system/functions.php in Neocrome Seditio build 160 and 161 allow remote attackers to inject arbitrary web script or HTML via the (1) newmsg or (2) rtext parameter. NOTE: some of these details are obtained from third party information.
Affected configurations
Node
neocromeseditioMatch-
Related
nvd
nvd
CVE-2012-5914
2012-11-17 21:55:06
cvelist
cvelist
CVE-2012-5914
2012-11-17 21:00:00
prion
prion
Cross site scripting
2012-11-17 21:55:00
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.003
Percentile
69.0%
Related for CVE-2012-5914