CVE-2012-6659: XSS
Published Sep 19, 2014
·Updated
Cross-site scripting (XSS) vulnerability in the admin interface in Phorum before 5.2.19 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Affected Software
21 affected components
Phorum Phorum<=5.2.18
Phorum Phorum=5.2
Phorum Phorum=5.2.1
Phorum Phorum=5.2.2-beta
Phorum Phorum=5.2.3-rc1
Phorum Phorum=5.2.4-rc2
Phorum Phorum=5.2.5
Phorum Phorum=5.2.6
Phorum Phorum=5.2.7
Phorum Phorum=5.2.8
Phorum Phorum=5.2.9
Phorum Phorum=5.2.10
Phorum Phorum=5.2.10-rc1
Phorum Phorum=5.2.11
Phorum Phorum=5.2.12
Phorum Phorum=5.2.12-a
Phorum Phorum=5.2.13
Phorum Phorum=5.2.14
Phorum Phorum=5.2.15
Phorum Phorum=5.2.15-a
Phorum Phorum=5.2.16
Remediation
Patch Available
Event History
Sep 19, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-6659?
The severity of CVE-2012-6659 is classified as moderate due to its potential to allow XSS attacks.
2
How do I fix CVE-2012-6659?
To fix CVE-2012-6659, upgrade Phorum to version 5.2.19 or later.
3
What components are affected by CVE-2012-6659?
CVE-2012-6659 affects Phorum versions prior to 5.2.19.
4
Can CVE-2012-6659 be exploited remotely?
Yes, CVE-2012-6659 can be exploited remotely through crafted URLs.
5
What type of vulnerability is CVE-2012-6659?
CVE-2012-6659 is a Cross-Site Scripting (XSS) vulnerability.