PT-2012-5977 · Intelliants · Subrion Cms

Gjoko Krstic · Published 2012-10-22 · Updated 2017-08-29 · CVE-2012-5452

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Subrion CMS version 2.2.1 Subrion CMS version 2.2.2

Description The issue allows remote attackers to inject arbitrary web script or HTML via several parameters, including multi title in "/blocks/add/", cost, days, or title[en] in "/plans/add/", name or title[en] in "/fields/group/add/" within "admin/manage/", and f[accounts][fullname] or f[accounts][username] in "/advsearch/".

Recommendations For Subrion CMS version 2.2.1, avoid using the multi title parameter in the "/blocks/add/" endpoint, the cost, days, or title[en] parameters in the "/plans/add/" endpoint, the name or title[en] parameters in the "/fields/group/add/" endpoint within "admin/manage/", and the f[accounts][fullname] or f[accounts][username] parameters in the "/advsearch/" endpoint until a patch is available. For Subrion CMS version 2.2.2, restrict the use of the f[accounts][fullname] and f[accounts][username] parameters in the "/advsearch/" endpoint as a temporary mitigation measure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2012-5452

Affected Products

Subrion Cms

References · 12

• 🔥 http://packetstormsecurity.org/files/116434/Subrion-CMS-2.2.1-Cross-Site-Scripting.html · Exploit
• 🔥 http://zeroscience.mk/en/vulnerabilities/ZSL-2012-5105.php · Exploit
• 🔥 https://htbridge.com/advisory/HTB23113 · Exploit
• 🔥 https://exploit-db.com/exploits/22159 · Exploit
• http://subrion.com/forums/announcements/893-subrion-open-source-cms-2-2-2-has-been-released.html · Vendor Advisory
• http://secunia.com/advisories/44917 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-5452 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/78467 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5452 · Note
• http://securityfocus.com/bid/55502 · Note
• http://packetstormsecurity.org/files/117460/Subrion-CMS-2.2.1-XSS-CSRF-SQL-Injection.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/78468 · Note