CVE-2012-2901
Last modified
CVE-2012-2901 is a vulnerability of currently unknown severity. Cross-site scripting (XSS) vulnerability in the Profile List in the Joomla Content Editor (JCE) component before 2.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the search parameter to administrator/index.php.. EPSS estimates a 1.16% chance of exploitation in the next 30 days.
Description
Cross-site scripting (XSS) vulnerability in the Profile List in the Joomla Content Editor (JCE) component before 2.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the search parameter to administrator/index.php.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ryan Demmer | Joomla Content Editor | <= 2.0.21 |
| Ryan Demmer | Joomla Content Editor | 2.0 |
References
- http://secunia.com/advisories/49206Vendor Advisory
- http://secunia.com/secunia_research/2012-14/Vendor Advisory
- http://secunia.com/advisories/49206Vendor Advisory
- http://secunia.com/secunia_research/2012-14/Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2012-2901?
How severe is CVE-2012-2901?
How do I fix CVE-2012-2901?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2012
- CVE-2012-2895The PDF functionality in Google Chrome before 22.0.1229.79 a…
- CVE-2012-2896Integer overflow in the WebGL implementation in Google Chrom…
- CVE-2012-2897The kernel-mode drivers in Microsoft Windows XP SP2 and SP3,…7.8
- CVE-2012-2898Google Chrome before 21.0.1180.82 on iOS on iPad devices all…
- CVE-2012-2899Google Chrome before 21.0.1180.82 on iOS makes certain incor…
- CVE-2012-2900Skia, as used in Google Chrome before 22.0.1229.92, does not…
- CVE-2012-2902Unrestricted file upload vulnerability in editor/extensions/…
- CVE-2012-2903Multiple cross-site scripting (XSS) vulnerabilities in PHP A…
- CVE-2012-2904player.swf in LongTail JW Player 5.9 allows remote attackers…
- CVE-2012-2905Artiphp CMS 5.5.0 Neo (r422) stores database backups with pr…
- CVE-2012-2906Multiple cross-site scripting (XSS) vulnerabilities in artpu…
- CVE-2012-2907Cross-site scripting (XSS) vulnerability in the aberdeen_bre…
Are you affected by CVE-2012-2901?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST