Lucene search

[email protected]CVE-2012-6621

HistoryJan 16, 2014 - 9:55 p.m.

CVE-2012-6621

2014-01-1621:55:08

CWE-79

[email protected]

web.nvd.nist.gov

cve-2012-6621

cross-site scripting

xss

getsimple cms

security vulnerabilities

remote attack

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.3%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1, 3.1.2, 3.2.3, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Email Address or (2) Custom Permalink Structure fields in admin/settings.php; (3) path parameter to admin/upload.php; (4) err parameter to admin/theme.php; (5) error parameter to admin/pages.php; or (6) success or (7) err parameter to admin/index.php.

Affected configurations

NVD

Node

get-simplegetsimple_cmsRange≤3.2.3

get-simplegetsimple_cmsMatch1.0

get-simplegetsimple_cmsMatch1.1

get-simplegetsimple_cmsMatch1.2

get-simplegetsimple_cmsMatch1.3

get-simplegetsimple_cmsMatch1.4

get-simplegetsimple_cmsMatch1.5

get-simplegetsimple_cmsMatch1.6

get-simplegetsimple_cmsMatch1.7

get-simplegetsimple_cmsMatch1.25

get-simplegetsimple_cmsMatch1.71

get-simplegetsimple_cmsMatch2.0

get-simplegetsimple_cmsMatch2.01

get-simplegetsimple_cmsMatch2.03

get-simplegetsimple_cmsMatch2.03.1

get-simplegetsimple_cmsMatch3.0

get-simplegetsimple_cmsMatch3.1

get-simplegetsimple_cmsMatch3.1.1

get-simplegetsimple_cmsMatch3.1.2

get-simplegetsimple_cmsMatch3.2

get-simplegetsimple_cmsMatch3.2.1

get-simplegetsimple_cmsMatch3.2.2

CPENameOperatorVersion
get-simple:getsimple_cmsget-simple getsimple cmsle3.2.3
get-simple:getsimple_cmsget-simple getsimple cmseq1.0
get-simple:getsimple_cmsget-simple getsimple cmseq1.1
get-simple:getsimple_cmsget-simple getsimple cmseq1.2
get-simple:getsimple_cmsget-simple getsimple cmseq1.3
get-simple:getsimple_cmsget-simple getsimple cmseq1.4
get-simple:getsimple_cmsget-simple getsimple cmseq1.5
get-simple:getsimple_cmsget-simple getsimple cmseq1.6
get-simple:getsimple_cmsget-simple getsimple cmseq1.7
get-simple:getsimple_cmsget-simple getsimple cmseq1.25

CPE	Name	Operator	Version
get-simple:getsimple_cms	get-simple getsimple cms	le	3.2.3
get-simple:getsimple_cms	get-simple getsimple cms	eq	1.0
get-simple:getsimple_cms	get-simple getsimple cms	eq	1.1
get-simple:getsimple_cms	get-simple getsimple cms	eq	1.2
get-simple:getsimple_cms	get-simple getsimple cms	eq	1.3
get-simple:getsimple_cms	get-simple getsimple cms	eq	1.4
get-simple:getsimple_cms	get-simple getsimple cms	eq	1.5
get-simple:getsimple_cms	get-simple getsimple cms	eq	1.6
get-simple:getsimple_cms	get-simple getsimple cms	eq	1.7
get-simple:getsimple_cms	get-simple getsimple cms	eq	1.25

Rows per page:

1-10 of 221

References

packetstormsecurity.com/files/124711

packetstormsecurity.org/files/112643/GetSimple-CMS-3.1-Cross-Site-Scripting.html

secunia.com/advisories/49137

www.securityfocus.com/bid/53501

www.vulnerability-lab.com/get_content.php?id=521

exchange.xforce.ibmcloud.com/vulnerabilities/75534

exchange.xforce.ibmcloud.com/vulnerabilities/75535

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.3%

JSON

Related for CVE-2012-6621

exploitdb4 prion3 nvd3 cvelist3 cve2 openvas1