CVE-2012-1992: XSS
Published Apr 11, 2012
·Updated
Cross-site scripting (XSS) vulnerability in admin/edituser.php in CMS Made Simple 1.10.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the email parameter (aka the Email Address field in the Edit User template).
Affected Software
118 affected components
CMSmadesimple CMS Made Simple<=1.10.3
CMSmadesimple CMS Made Simple=0.1
CMSmadesimple CMS Made Simple=0.2
CMSmadesimple CMS Made Simple=0.2.1
CMSmadesimple CMS Made Simple=0.3
CMSmadesimple CMS Made Simple=0.3.1
CMSmadesimple CMS Made Simple=0.3.2
CMSmadesimple CMS Made Simple=0.4
CMSmadesimple CMS Made Simple=0.4.1
CMSmadesimple CMS Made Simple=0.5
CMSmadesimple CMS Made Simple=0.5.1
CMSmadesimple CMS Made Simple=0.6
CMSmadesimple CMS Made Simple=0.6.1
CMSmadesimple CMS Made Simple=0.6.2
CMSmadesimple CMS Made Simple=0.6.3
CMSmadesimple CMS Made Simple=0.7
CMSmadesimple CMS Made Simple=0.7.1
CMSmadesimple CMS Made Simple=0.7.2
CMSmadesimple CMS Made Simple=0.7.3
CMSmadesimple CMS Made Simple=0.8
CMSmadesimple CMS Made Simple=0.8.1
CMSmadesimple CMS Made Simple=0.8.2
CMSmadesimple CMS Made Simple=0.9
CMSmadesimple CMS Made Simple=0.9.1
CMSmadesimple CMS Made Simple=0.9.2
CMSmadesimple CMS Made Simple=0.10
CMSmadesimple CMS Made Simple=0.10.1
CMSmadesimple CMS Made Simple=0.10.2
CMSmadesimple CMS Made Simple=0.10.3
CMSmadesimple CMS Made Simple=0.10.4
CMSmadesimple CMS Made Simple=0.11
CMSmadesimple CMS Made Simple=0.11-beta5
CMSmadesimple CMS Made Simple=0.11-beta6
CMSmadesimple CMS Made Simple=0.11.1
CMSmadesimple CMS Made Simple=0.11.2
CMSmadesimple CMS Made Simple=0.12
CMSmadesimple CMS Made Simple=0.12-beta1
CMSmadesimple CMS Made Simple=0.12-beta2
CMSmadesimple CMS Made Simple=0.12.1
CMSmadesimple CMS Made Simple=0.12.2
CMSmadesimple CMS Made Simple=0.13
CMSmadesimple CMS Made Simple=0.13-beta1
CMSmadesimple CMS Made Simple=0.13-beta2
CMSmadesimple CMS Made Simple=0.13-beta3
CMSmadesimple CMS Made Simple=1.0
CMSmadesimple CMS Made Simple=1.0-beta1
CMSmadesimple CMS Made Simple=1.0-beta2
CMSmadesimple CMS Made Simple=1.0-beta3
CMSmadesimple CMS Made Simple=1.0-beta4
CMSmadesimple CMS Made Simple=1.0-beta5
CMSmadesimple CMS Made Simple=1.0-beta6
CMSmadesimple CMS Made Simple=1.0.1
CMSmadesimple CMS Made Simple=1.0.2
CMSmadesimple CMS Made Simple=1.0.3
CMSmadesimple CMS Made Simple=1.0.4
CMSmadesimple CMS Made Simple=1.0.5
CMSmadesimple CMS Made Simple=1.0.6
CMSmadesimple CMS Made Simple=1.0.7
CMSmadesimple CMS Made Simple=1.0.8
CMSmadesimple CMS Made Simple=1.1
CMSmadesimple CMS Made Simple=1.1-rc1
CMSmadesimple CMS Made Simple=1.1-rc2
CMSmadesimple CMS Made Simple=1.1-rc3
CMSmadesimple CMS Made Simple=1.1.1
CMSmadesimple CMS Made Simple=1.1.2
CMSmadesimple CMS Made Simple=1.1.3
CMSmadesimple CMS Made Simple=1.1.3.1
CMSmadesimple CMS Made Simple=1.1.4
CMSmadesimple CMS Made Simple=1.1.4.1
CMSmadesimple CMS Made Simple=1.2
CMSmadesimple CMS Made Simple=1.2-beta1
CMSmadesimple CMS Made Simple=1.2-beta2
CMSmadesimple CMS Made Simple=1.2-beta3
CMSmadesimple CMS Made Simple=1.2-rc1
CMSmadesimple CMS Made Simple=1.2.1
CMSmadesimple CMS Made Simple=1.2.2
CMSmadesimple CMS Made Simple=1.2.3
CMSmadesimple CMS Made Simple=1.2.4
CMSmadesimple CMS Made Simple=1.2.5
CMSmadesimple CMS Made Simple=1.3
CMSmadesimple CMS Made Simple=1.3-beta1
CMSmadesimple CMS Made Simple=1.3-beta2
CMSmadesimple CMS Made Simple=1.3.1
CMSmadesimple CMS Made Simple=1.4
CMSmadesimple CMS Made Simple=1.4-beta1
CMSmadesimple CMS Made Simple=1.4-beta2
CMSmadesimple CMS Made Simple=1.4.1
CMSmadesimple CMS Made Simple=1.5
CMSmadesimple CMS Made Simple=1.5-beta1
CMSmadesimple CMS Made Simple=1.5.1
CMSmadesimple CMS Made Simple=1.5.2
CMSmadesimple CMS Made Simple=1.5.3
CMSmadesimple CMS Made Simple=1.5.4
CMSmadesimple CMS Made Simple=1.6
CMSmadesimple CMS Made Simple=1.6.1
CMSmadesimple CMS Made Simple=1.6.2
CMSmadesimple CMS Made Simple=1.6.3
CMSmadesimple CMS Made Simple=1.6.4
CMSmadesimple CMS Made Simple=1.6.5
CMSmadesimple CMS Made Simple=1.6.6
CMSmadesimple CMS Made Simple=1.6.7
CMSmadesimple CMS Made Simple=1.6.8
CMSmadesimple CMS Made Simple=1.7
CMSmadesimple CMS Made Simple=1.7.1
CMSmadesimple CMS Made Simple=1.8
CMSmadesimple CMS Made Simple=1.8.1
CMSmadesimple CMS Made Simple=1.8.2
CMSmadesimple CMS Made Simple=1.9
CMSmadesimple CMS Made Simple=1.9.1
CMSmadesimple CMS Made Simple=1.9.2
CMSmadesimple CMS Made Simple=1.9.3
CMSmadesimple CMS Made Simple=1.9.4
CMSmadesimple CMS Made Simple=1.9.4.1
CMSmadesimple CMS Made Simple=1.9.4.2
CMSmadesimple CMS Made Simple=1.9.4.3
CMSmadesimple CMS Made Simple=1.10
CMSmadesimple CMS Made Simple=1.10.1
CMSmadesimple CMS Made Simple=1.10.2
Event History
Apr 11, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-1992?
CVE-2012-1992 is rated as a medium severity vulnerability that allows remote attackers to execute arbitrary scripts via the email parameter.
2
How do I fix CVE-2012-1992?
To fix CVE-2012-1992, upgrade CMS Made Simple to version 1.10.4 or later, which addresses the XSS vulnerability.
3
What systems are affected by CVE-2012-1992?
CVE-2012-1992 affects all versions of CMS Made Simple up to and including 1.10.3.
4
What is the impact of CVE-2012-1992?
The impact of CVE-2012-1992 includes the potential for attackers to inject malicious JavaScript or HTML into the admin interface.
5
Is CVE-2012-1992 a common vulnerability?
CVE-2012-1992 is a known vulnerability in the CMS Made Simple software used by various websites, making it fairly common in installations that have not been updated.