CVE-2012-1979
Published Apr 17, 2012
Last updated 7 years ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability in starnet/index.php in SyndeoCMS 3.0.01 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the email parameter (aka Email address field) in an edit_user configuration action.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 3.5
- Impact score
- 2.9
- Exploitability score
- 6.8
- Vector string
- AV:N/AC:M/Au:S/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:syndeocms:syndeocms:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1BBA5244-2D39-434C-A618-341CFE8A4A2D",
"versionEndIncluding": "3.0.01"
},
{
"criteria": "cpe:2.3:a:syndeocms:syndeocms:2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A15A5AA5-2150-4E4F-9D04-6AD1B6FA90A0"
},
{
"criteria": "cpe:2.3:a:syndeocms:syndeocms:2.4.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2BC375EC-C270-4EBB-B81F-28EA4B2FDE95"
},
{
"criteria": "cpe:2.3:a:syndeocms:syndeocms:2.5.00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9EE73158-2F9D-45E8-BCDD-4DDA6DED5C97"
},
{
"criteria": "cpe:2.3:a:syndeocms:syndeocms:2.5.01:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "679F9994-1C5D-455B-928D-D18F1618B745"
},
{
"criteria": "cpe:2.3:a:syndeocms:syndeocms:2.6.00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7DA79E21-A2F8-47FB-80EB-27749520E04C"
},
{
"criteria": "cpe:2.3:a:syndeocms:syndeocms:2.7.00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F339F8AB-4969-4338-862B-C9ECB5443301"
},
{
"criteria": "cpe:2.3:a:syndeocms:syndeocms:2.8.00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AC1F7AD4-E83D-459E-B5EA-DAFD46FF4200"
},
{
"criteria": "cpe:2.3:a:syndeocms:syndeocms:2.8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ACA74ADF-71ED-45FE-A147-0DCB1B9031FD"
},
{
"criteria": "cpe:2.3:a:syndeocms:syndeocms:2.8.02:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "619EE292-52F6-4AD5-AEA8-433CE472CE93"
},
{
"criteria": "cpe:2.3:a:syndeocms:syndeocms:2.9.00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8BB20ABE-B0B7-4761-B523-93EC012D3856"
},
{
"criteria": "cpe:2.3:a:syndeocms:syndeocms:3.0.00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8132A3E2-C0FC-4BDC-A898-D86D86ECCFCD"
}
],
"operator": "OR"
}
]
}
]