CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-1979

Cross-site scripting (XSS) vulnerability in starnet/index.php in SyndeoCMS 3.0.01 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the email parameter (aka Email address field) in an edit_user configuration action.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.009

EPSS Ranking 75.3%

CVSS Severity

CVSS v2 Score 3.5

References

Products affected by CVE-2012-1979

Syndeocms » Syndeocms » Version: 2.4

cpe:2.3:a:syndeocms:syndeocms:2.4
Syndeocms » Syndeocms » Version: 2.4.10

cpe:2.3:a:syndeocms:syndeocms:2.4.10
Syndeocms » Syndeocms » Version: 2.5.00

cpe:2.3:a:syndeocms:syndeocms:2.5.00
Syndeocms » Syndeocms » Version: 2.5.01

cpe:2.3:a:syndeocms:syndeocms:2.5.01
Syndeocms » Syndeocms » Version: 2.6.00

cpe:2.3:a:syndeocms:syndeocms:2.6.00
Syndeocms » Syndeocms » Version: 2.7.00

cpe:2.3:a:syndeocms:syndeocms:2.7.00
Syndeocms » Syndeocms » Version: 2.8.00

cpe:2.3:a:syndeocms:syndeocms:2.8.00
Syndeocms » Syndeocms » Version: 2.8.02

cpe:2.3:a:syndeocms:syndeocms:2.8.02
Syndeocms » Syndeocms » Version: 2.8.1

cpe:2.3:a:syndeocms:syndeocms:2.8.1
Syndeocms » Syndeocms » Version: 2.9.00

cpe:2.3:a:syndeocms:syndeocms:2.9.00
Syndeocms » Syndeocms » Version: 3.0.00

cpe:2.3:a:syndeocms:syndeocms:3.0.00
Syndeocms » Syndeocms » Version: 3.0.01

cpe:2.3:a:syndeocms:syndeocms:3.0.01

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-1979

Products

Pricing

Contact Us