Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-1870 State: PUBLISHED Published: 2012-07-10T21:00:00 Last Updated: 2024-08-06T19:08:38.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CBC mode in the TLS protocol, as used in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and other products, allows remote web servers to obtain plaintext data by triggering multiple requests to a third-party HTTPS server and sniffing the network during the resulting HTTPS session, aka "TLS Protocol Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-192A.htm
y." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-192A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-049 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15644
CVE ID: CVE-2012-1871 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-1872 State: PUBLISHED Published: 2012-06-12T22:00:00 Last Updated: 2025-01-21T19:28:49.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to inject arbitrary web script or HTML via crafted character sequences with EUC-JP encoding, aka "EUC-JP Character Encoding Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-037 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15629
CVE ID: CVE-2012-1873 State: PUBLISHED Published: 2012-06-12T22:00:00 Last Updated: 2024-08-06T19:08:38.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7 through 9 does not properly create and initialize string data, which allows remote attackers to obtain sensitive information from process memory via a crafted HTML document, aka "Null Byte Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-164A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-037 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mi
ecurity-updates/securitybulletins/2012/ms12-037 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15026
CVE ID: CVE-2012-1874 State: PUBLISHED Published: 2012-06-12T22:00:00 Last Updated: 2024-08-06T19:08:38.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows user-assisted remote attackers to execute arbitrary code by accessing a deleted object, aka "Developer Toolbar Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-164A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-037 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3
securitybulletins/2012/ms12-037 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15425
CVE ID: CVE-2012-1875 State: PUBLISHED Published: 2012-06-12T22:00:00 Last Updated: 2024-08-06T19:08:38.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Same ID Property Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-164A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15663 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-037
CVE ID: CVE-2012-1876 State: PUBLISHED Published: 2012-06-12T22:00:00 Last Updated: 2024-08-06T19:08:38.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by attempting to access a nonexistent object, leading to a heap-based buffer overflow, aka "Col Element Remote Code Execution Vulnerability," as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2012. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-164A.html - http://pwn2own.zerodayinitiati
E Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-164A.html - http://pwn2own.zerodayinitiative.com/status.html - http://arstechnica.com/business/news/2012/03/ie-9-on-latest-windows-gets-stomped-at-hacker-contest.ars - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-037 - http://www.zdnet.com/blog/security/pwn2own-2012-ie-9-hacked-with-two-0day-vulnerabilities/10621 - http://twitter.com/vupen/statuses/177895844828291073 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15539
CVE ID: CVE-2012-1877 State: PUBLISHED Published: 2012-06-12T22:00:00 Last Updated: 2024-08-06T19:08:38.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Title Element Change Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-164A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-037 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15472
CVE ID: CVE-2012-1878 State: PUBLISHED Published: 2012-06-12T22:00:00 Last Updated: 2024-08-06T19:08:38.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "OnBeforeDeactivate Event Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-164A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-037 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15
uritybulletins/2012/ms12-037 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15632
CVE ID: CVE-2012-1879 State: PUBLISHED Published: 2012-06-12T22:00:00 Last Updated: 2024-10-17T18:32:58.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by attempting to access an undefined memory location, aka "insertAdjacentText Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.us-cert.gov/cas/techalerts/TA12-164A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15588 - https://docs.microsoft.com/en-us/sec
l.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15588 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-037
CVE ID: CVE-2012-1880 State: PUBLISHED Published: 2012-06-12T22:00:00 Last Updated: 2024-08-06T19:17:26.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "insertRow Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-164A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-037 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14975
CVE ID: CVE-2012-1881 State: PUBLISHED Published: 2012-06-12T22:00:00 Last Updated: 2024-08-06T19:17:26.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "OnRowsInserted Event Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-164A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-037 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15378
CVE ID: CVE-2012-1882 State: PUBLISHED Published: 2012-06-12T22:00:00 Last Updated: 2024-08-06T19:17:26.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 9 does not block cross-domain scrolling events, which allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site, aka "Scrolling Events Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-037 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15367
CVE ID: CVE-2012-1883 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-1884 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2012-1885 State: PUBLISHED Published: 2012-11-14T00:00:00 Last Updated: 2024-08-06T19:17:26.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Office 2008 and 2011 for Mac; and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SerAuxErrBar Heap Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15752 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-076
/oval%3Aorg.mitre.oval%3Adef%3A15752 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-076 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78072 - http://www.us-cert.gov/cas/techalerts/TA12-318A.html - http://www.securityfocus.com/bid/56425 - http://www.securitytracker.com/id?1027752 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15916
CVE ID: CVE-2012-1886 State: PUBLISHED Published: 2012-11-14T00:00:00 Last Updated: 2024-08-06T19:17:26.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Excel Viewer; and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56426 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-076 - http://www.us-cert.gov/cas/techalerts/TA12-318A.html - htt
.com/en-us/security-updates/securitybulletins/2012/ms12-076 - http://www.us-cert.gov/cas/techalerts/TA12-318A.html - http://www.securitytracker.com/id?1027752 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15927 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78073
CVE ID: CVE-2012-1887 State: PUBLISHED Published: 2012-11-14T00:00:00 Last Updated: 2024-08-06T19:17:26.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1, and Office 2008 and 2011 for Mac, allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SST Invalid Length Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56430 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-076 - http://www.us-cert.gov/cas/techalerts/TA12-318A.html - https://oval.cisecurity.o
dates/securitybulletins/2012/ms12-076 - http://www.us-cert.gov/cas/techalerts/TA12-318A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15970 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15717 - http://www.securitytracker.com/id?1027752 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78074
CVE ID: CVE-2012-1888 State: PUBLISHED Published: 2012-08-15T01:00:00 Last Updated: 2024-08-06T19:17:26.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft Visio 2010 SP1 and Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file, aka "Visio DXF File Format Buffer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-059 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15811 - http://www.us-cert.gov/cas/techalerts/TA12-227A.html
CVE ID: CVE-2012-1889 State: PUBLISHED Published: 2012-06-13T01:00:00.000Z Last Updated: 2025-10-22T00:05:47.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.us-cert.gov/cas/techalerts/TA12-192A.html - http://technet.microsoft.com/security/advisory/2719615 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15195 - https://d
isory/2719615 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15195 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-043 - http://www.us-cert.gov/cas/techalerts/TA12-174A.html
CVE ID: CVE-2012-1890 State: PUBLISHED Published: 2012-07-10T21:00:00 Last Updated: 2024-08-06T19:17:26.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle keyboard-layout files, which allows local users to gain privileges via a crafted application, aka "Keyboard Layout Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-192A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.m
://www.us-cert.gov/cas/techalerts/TA12-192A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15416 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-047
CVE ID: CVE-2012-1891 State: PUBLISHED Published: 2012-07-10T21:00:00 Last Updated: 2024-10-17T18:28:20.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2 and Windows Data Access Components (WDAC) 6.0 allows remote attackers to execute arbitrary code via crafted XML data that triggers access to an uninitialized object in memory, aka "ADO Cachesize Heap Overflow RCE Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.us-cert.gov/cas/techalerts/TA12-192A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012
www.us-cert.gov/cas/techalerts/TA12-192A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-045 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14783
CVE ID: CVE-2012-1892 State: PUBLISHED Published: 2012-09-11T18:00:00 Last Updated: 2024-08-06T19:17:26.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Microsoft Visual Studio Team Foundation Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "XSS Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15779 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-061 - http://www.us-cert.gov/cas/techalerts/TA12-255A.html - http://www.secu
ecurity-updates/securitybulletins/2012/ms12-061 - http://www.us-cert.gov/cas/techalerts/TA12-255A.html - http://www.securitytracker.com/id?1027511 - http://secunia.com/advisories/50463 - http://www.securityfocus.com/bid/55409
CVE ID: CVE-2012-1893 State: PUBLISHED Published: 2012-07-10T21:00:00 Last Updated: 2024-08-06T19:17:26.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate callback parameters during creation of a hook procedure, which allows local users to gain privileges via a crafted application, aka "Win32k Incorrect Type Handling Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-192A.html - https://oval.cisec
Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-192A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15654 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-047
CVE ID: CVE-2012-1894 State: PUBLISHED Published: 2012-07-10T21:00:00 Last Updated: 2024-08-06T19:17:26.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office for Mac 2011 uses world-writable permissions for the "Applications/Microsoft Office 2011/" directory and certain other directories, which allows local users to gain privileges by placing a Trojan horse executable file in one of these directories, aka "Office for Mac Improper Folder Permissions Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA12-192A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-051 -
gov/cas/techalerts/TA12-192A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-051 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15602
CVE ID: CVE-2012-1895 State: PUBLISHED Published: 2012-11-14T00:00:00 Last Updated: 2024-08-06T19:17:26.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: The reflection implementation in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5.1, and 4 does not properly enforce object permissions, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka "Reflection Bypass Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15924 - http://www.us-cert.gov/cas/techale
val.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15924 - http://www.us-cert.gov/cas/techalerts/TA12-318A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-074 - http://secunia.com/advisories/51236 - http://www.securitytracker.com/id?1027753
CVE ID: CVE-2012-1896 State: PUBLISHED Published: 2012-11-14T00:00:00 Last Updated: 2024-08-06T19:17:26.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly consider trust levels during construction of output data, which allows remote attackers to obtain sensitive information via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka "Code Access Security Info Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/56456 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1
w.securityfocus.com/bid/56456 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15785 - http://www.us-cert.gov/cas/techalerts/TA12-318A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-074 - http://secunia.com/advisories/51236 - http://www.securitytracker.com/id?1027753
CVE ID: CVE-2012-1897 State: PUBLISHED Published: 2012-10-01T20:00:00Z Last Updated: 2024-09-17T01:21:17.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Wolf CMS 0.75 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) delete users via the user id number to admin/user/delete; (2) delete pages via the page id number to admin/page/delete; delete the (3) images or (4) themes directory via the directory name to admin/plugin/file_manager/delete, and possibly other directories; or (5) logout the user via a request to admin/login/logout. Additional Analyst Notes: - CVE P
ossibly other directories; or (5) logout the user via a request to admin/login/logout. Additional Analyst Notes: - CVE Program Container: References: - http://www.webapp-security.com/wp-content/uploads/2012/03/Wolfcms-0.75-Multiple-Vulnerabilities-CSRF-XSS.txt - http://secunia.com/advisories/48520 - http://www.webapp-security.com/2012/03/wolfcms/ - http://packetstormsecurity.org/files/111116/Wolfcms-0.75-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
CVE ID: CVE-2012-1898 State: PUBLISHED Published: 2012-10-01T20:00:00Z Last Updated: 2024-09-17T01:36:28.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in wolfcms/admin/user/add in Wolf CMS 0.75 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user[name], (2) user[email], or (3) user[username] parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.webapp-security.com/wp-content/uploads/2012/03/Wolfcms-0.75-Multiple-Vulnerabilities-CSRF-XSS.txt - http://www.webapp-security.com/2012/03/wolfcms/ - http://packetstormsecurity.org/files/111116/Wolfcms-0.75-Cros
SS.txt - http://www.webapp-security.com/2012/03/wolfcms/ - http://packetstormsecurity.org/files/111116/Wolfcms-0.75-Cross-Site-Request-Forgery-Cross-Site-Scripting.html