B2evolution B2evolution : Security vulnerabilities, CVEs published in November 2012

Copy

CVE-2012-5911

Cross-site scripting (XSS) vulnerability in blogs/blog1.php in b2evolution 4.1.3 allows remote attackers to inject arbitrary web script or HTML via the message body.

Max CVSS

4.3

EPSS Score

0.29%

Published

2012-11-17

Updated

2017-08-29

CVE-2012-5910

SQL injection vulnerability in blogs/htsrv/viewfile.php in b2evolution 4.1.3 allows remote authenticated users to execute arbitrary SQL commands via the root parameter.

Max CVSS

6.5

EPSS Score

0.26%

Published

2012-11-17

Updated

2017-08-29

2 vulnerabilities found

This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!