CVE-2012-5181
Published Dec 21, 2012
Last updated 7 years ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability in concrete5 Japanese 5.5.1 through 5.5.2.1 and concrete5 English 5.5.0 through 5.6.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- Source
- vultures@jpcert.or.jp
- NVD status
- Analyzed
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:concrete5:concrete5:5.5.0:*:*:en:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "427D9852-7256-4F9D-B1F4-57875B2DE00E"
},
{
"criteria": "cpe:2.3:a:concrete5:concrete5:5.5.1:*:*:en:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "286F3B33-5FA9-47F0-8211-FAD3582B99AE"
},
{
"criteria": "cpe:2.3:a:concrete5:concrete5:5.5.1:*:*:ja:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9B9BEA0A-C718-4244-A904-EB16DFD55A4D"
},
{
"criteria": "cpe:2.3:a:concrete5:concrete5:5.5.2:*:*:en:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8818745-0AEC-4ED7-875C-DAB58D5352F0"
},
{
"criteria": "cpe:2.3:a:concrete5:concrete5:5.5.2:*:*:ja:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3FFACC5D-B215-4217-A413-369A3CA45A37"
},
{
"criteria": "cpe:2.3:a:concrete5:concrete5:5.5.2.1:*:*:en:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3BE982C-8DB3-4815-92B6-441628344364"
},
{
"criteria": "cpe:2.3:a:concrete5:concrete5:5.5.2.1:*:*:ja:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FF72B562-BCF1-422E-83BC-373F7AB0662F"
},
{
"criteria": "cpe:2.3:a:concrete5:concrete5:5.6.0:*:*:en:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6A41A79F-BE08-4C4F-926A-1688962B66EB"
},
{
"criteria": "cpe:2.3:a:concrete5:concrete5:5.6.0.1:*:*:en:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB8774E2-4651-42ED-9A38-1BF2DF1D68CE"
},
{
"criteria": "cpe:2.3:a:concrete5:concrete5:5.6.0.2:*:*:en:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "789FFC3F-30F4-4806-983B-7B895980151E"
}
],
"operator": "OR"
}
]
}
]