Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in pragmaMx 1.x before 1.12.2 allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter to modules.php or (2) img_url to includes/wysiwyg/spaw/editor/plugins/imgpopup/img_popup.php.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Pragmamx | Pragmamx | >= 1.0, < 1.12.2 |
Related Weaknesses (CWE)
References
- http://www.pragmamx.org/Forum-topic-33554.htmlIssue TrackingVendor Advisory
- http://www.pragmamx.org/News-pragmaMx-1.12-Servicepack2-item-706.htmlVendor Advisory
- https://www.htbridge.com/advisory/HTB23090ExploitThird Party Advisory
- http://www.pragmamx.org/Forum-topic-33554.htmlIssue TrackingVendor Advisory
- http://www.pragmamx.org/News-pragmaMx-1.12-Servicepack2-item-706.htmlVendor Advisory
- https://www.htbridge.com/advisory/HTB23090ExploitThird Party Advisory
FAQ
What is CVE-2012-2452?
CVE-2012-2452 is a vulnerability with a CVSS score of 6.1 (MEDIUM). Multiple cross-site scripting (XSS) vulnerabilities in pragmaMx 1.x before 1.12.2 allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter to modules.php or (2) img_url...
How severe is CVE-2012-2452?
CVE-2012-2452 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2012-2452?
Check the references section above for vendor advisories and patch information. Affected products include: Pragmamx Pragmamx.