CVE-2012-10004

CVSS V2 None CVSS V3 None
Description
A vulnerability was found in backdrop-contrib Basic Cart. It has been classified as problematic. Affected is the function basic_cart_checkout_form_submit of the file basic_cart.cart.inc. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 1.x-1.1.1 is able to address this issue. The name of the patch is a10424ccd4b3b4b433cf33b73c1ad608b11890b4. It is recommended to upgrade the affected component. VDB-217950 is the identifier assigned to this vulnerability.
Overview
  • CVE ID
  • CVE-2012-10004
  • Assigner
  • cna@vuldb.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-01-11T07:15:09
  • Last Modified Date
  • 2023-01-18T18:07:12
Weakness Enumerations
CWE URL
CWE-79 http://cwe.mitre.org/data/definitions/79.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:backdropcms:basic_cart:*:*:*:*:*:backdrop:*:* 1 OR 1.x-1.1.1
References
Reference URL Reference Tags
https://github.com/backdrop-contrib/basic_cart/commit/a10424ccd4b3b4b433cf33b73c1ad608b11890b4
https://github.com/backdrop-contrib/basic_cart/releases/tag/1.x-1.1.1
https://vuldb.com/?ctiid.217950
https://vuldb.com/?id.217950
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2012-10004
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-10004
History
Created Old Value New Value Data Type Notes
2023-01-11 07:17:20 Added to TrackCVE
2023-01-11 07:17:20 Weakness Enumeration new
2023-01-12 05:17:07 2023-01-11T15:09:17 CVE Modified Date updated
2023-01-12 05:17:07 Received Awaiting Analysis Vulnerability Status updated
2023-01-12 05:17:10 CVSS V3 information new
2023-01-12 05:17:10 CVSS V2 information new
2023-01-17 15:14:58 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2023-01-17 15:15:02 CVSS V3 information new
2023-01-17 15:15:02 CVSS V2 information new
2023-01-18 18:18:32 2023-01-18T18:07:12 CVE Modified Date updated
2023-01-18 18:18:32 Undergoing Analysis Analyzed Vulnerability Status updated
2023-01-18 18:18:33 CPE Information updated
2023-01-18 18:18:33 CVSS V3 information new
2023-01-18 18:18:33 CVSS V2 information new