Lucene search

[email protected]NVD:CVE-2012-3837

HistoryJul 03, 2012 - 10:55 p.m.

CVE-2012-3837

2012-07-0322:55:02

CWE-79

[email protected]

web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in apps/users/registration.template.php in Baby Gekko 1.2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) email_address, (3) password, (4) password_verify, (5) firstname, (6) lastname, or (7) verification_code parameter to users/action/register. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD

Node

babygekkobaby_gekkoRange≤1.2.0

babygekkobaby_gekkoMatch0.90

babygekkobaby_gekkoMatch0.91

babygekkobaby_gekkoMatch0.98alpha

babygekkobaby_gekkoMatch0.99beta

babygekkobaby_gekkoMatch1.0.0

babygekkobaby_gekkoMatch1.0.1

babygekkobaby_gekkoMatch1.1.0

babygekkobaby_gekkoMatch1.1.1

babygekkobaby_gekkoMatch1.1.2

babygekkobaby_gekkoMatch1.1.3

babygekkobaby_gekkoMatch1.1.4

babygekkobaby_gekkoMatch1.1.5

References

secunia.com/advisories/49052

www.babygekko.com/site/news/general/baby-gekko-v1-2-0-released-with-3rd-party-independent-security-testing-performed-by-zero-science-lab.html

www.exploit-db.com/exploits/18827

www.securityfocus.com/bid/53366

www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5086.php

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.4%

JSON

Related for NVD:CVE-2012-3837

cve1 prion1 cvelist1