Skip to content
OpenAdvisories

Archive

20 February 2012

Vulnerabilities first published on this day (UTC), newest first.

← January 2012 2012 / February /20 March 2012 →
  1. 111
  2. 234
  3. 314
  4. 4 
  5. 51
  6. 65
  7. 79
  8. 831
  9. 920
  10. 107
  11. 112
  12. 124
  13. 135
  14. 1459
  15. 1522
  16. 1621
  17. 177
  18. 1811
  19. 19 
  20. 2022
  21. 2137
  22. 224
  23. 2310
  24. 24 
  25. 254
  26. 26 
  27. 27 
  28. 28 
  29. 293
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium —
    CVE-2012-1209

    Fork CMS XSS via Highlight Parameter

    Cross-site scripting (XSS) vulnerability in backend/core/engine/base.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter.

    forkcms/forkcms Packagist
  • Medium —
    CVE-2012-1207

    ForkCMS Directory Traversal vulnerability

    Directory traversal vulnerability in frontend/core/engine/javascript.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the module parameter to frontend/js.php.

    forkcms/forkcms Packagist