CVE-2012-4771: XSS
Multiple cross-site scripting (XSS) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) admin/accounts/, (2) admin/manage/, or (3) admin/manage/blocks/edit/; or (4) group parameter to admin/configuration/. NOTE: The f[accounts][fullname] and f[accounts][username] vectors are covered in CVE-2012-5452.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4771?
The severity of CVE-2012-4771 is considered to be critical due to the potential for remote attackers to inject arbitrary web scripts or HTML.
How do I fix CVE-2012-4771?
To fix CVE-2012-4771, users should upgrade to Subrion CMS version 2.2.3 or later.
What are the affected versions in CVE-2012-4771?
CVE-2012-4771 affects Subrion CMS versions prior to 2.2.3, including 2.0.4, 2.2.0, 2.2.1, and all prior versions.
How does the CVE-2012-4771 vulnerability work?
CVE-2012-4771 allows attackers to exploit multiple cross-site scripting vulnerabilities by injecting scripts via specific parameters.
Who is vulnerable to CVE-2012-4771?
Anyone using Subrion CMS versions 2.2.2 and earlier is vulnerable to CVE-2012-4771.