CVE-2012-4890

MEDIO 4.3CVE-2012-4890 · Published 10/09/2012 · updated 16/06/2026

En resumen

CVE-2012-4890 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a flatnux (flatnux).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.4%, mayor que el 72.2% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
flatnux flatnux	`= 2008-12-11= 2009-01-27= 2009-02-04≤ 2011-08-09-2`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS 2011 08.09.2 and earlier allow remote attackers to inject arbitrary web script or HTML via a (1) comment to the news, (2) title to the news, or (3) the folder names in a gallery.

References

packetstormsecurity.org/files/111473/Flatnux-CMS-2011-08.09.2-CSRF-XSS-Directory-Traversal.html · Exploit
secunia.com/advisories/48656 · Vendor Advisory
secunia.com/advisories/48676 · Vendor Advisory
osvdb.org/80877
securityfocus.com/bid/52846
vulnerability-lab.com/get_content.php
exchange.xforce.ibmcloud.com/vulnerabilities/74566

Más vulnerabilidades de flatnux

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

flatnux

= 2008-12-11= 2009-01-27= 2009-02-04≤ 2011-08-09-2

No fix yet

Más vulnerabilidades de flatnux

Ver todo →