CVE-2012-5164 in CMS
Summary
Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the term parameter to (1) autocomplete.php, (2) search/ajax/autosuggest.php, (3) livesuggest.php, or (4) save.php in frontend/modules/search/ajax.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
09/25/2012
Disclosure
09/25/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 62444 | Fork CMS autocomplete.php cross site scripting | 79 | Not defined | Official fix | CVE-2012-5164 |