Published: 24/01/2013 Updated: 29/08/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 440

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in Wikidforum 2.10 allow remote malicious users to inject arbitrary web script or HTML via the (1) search field, or the (2) Author or (3) select_sort parameters in an advanced search.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wikidforum wikidforum 2.10

source: wwwsecurityfocuscom/bid/52425/info Wikidforum is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise ...

source: wwwsecurityfocuscom/bid/52425/info Wikidforum is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise t ...

CWE-79 http://www.openwall.com/lists/oss-security/2012/04/12/12 http://www.darksecurity.de/advisories/2012/SSCHADV2012-005.txt http://www.securityfocus.com/bid/52425 http://archives.neohapsis.com/archives/bugtraq/2012-03/0046.html http://www.wikidforum.com/forum/forum-software_29/wikidforum-support_31/sschadv2012-005-unfixed-xss-and-sql-injection-security-vulnerabilities_188.html http://www.openwall.com/lists/oss-security/2012/04/12/5 http://www.osvdb.org/80839 http://www.osvdb.org/80838 https://exchange.xforce.ibmcloud.com/vulnerabilities/73985 https://nvd.nist.gov https://www.exploit-db.com/exploits/36948/

CVE-2012-2099

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect