Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.3
CVSSv2

CVE-2012-4771

Published: 22/10/2012 Updated: 29/08/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Subscribe to Intelliants

Vulnerability Summary

Multiple cross-site scripting (XSS) vulnerabilities in Subrion CMS prior to 2.2.3 allow remote malicious users to inject arbitrary web script or HTML via the id parameter to (1) admin/accounts/, (2) admin/manage/, or (3) admin/manage/blocks/edit/; or (4) group parameter to admin/configuration/. NOTE: The f[accounts][fullname] and f[accounts][username] vectors are covered in CVE-2012-5452.

Vulnerable Product Search on Vulmon Subscribe to Product

intelliants subrion cms 2.2.0

intelliants subrion cms 2.0.4

intelliants subrion cms

intelliants subrion cms 2.2.1

Exploits

Exploit DB: subrion CMS 2.2.1 - Multiple Vulnerabilities
Advisory ID: HTB23113 Product: Subrion CMS Vendor: The Subrion development team Vulnerable Version(s): 221 and probably prior Tested Version: 221 Vendor Notification: September 5, 2012 Public Disclosure: October 17, 2012 Vulnerability Type: SQL Injection [CWE-89], Cross-Site Scripting [CWE-79], Cross-Site Request Forgery [CWE-352] CVE Referen ...
Exploit DB: Subrion CMS 2.2.1 XSS / CSRF / SQL Injection
Subrion CMS version 221 suffers from cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities ...

References

CWE-79http://secunia.com/advisories/51013http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5105.phphttp://www.subrion.com/forums/announcements/934-subrion-2-2-3-open-source-cms-core-available.htmlhttp://archives.neohapsis.com/archives/bugtraq/2012-10/0096.htmlhttps://www.htbridge.com/advisory/HTB23113http://packetstormsecurity.org/files/117460/Subrion-CMS-2.2.1-XSS-CSRF-SQL-Injection.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/79468https://nvd.nist.govhttps://www.exploit-db.com/exploits/22159/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook