{"api_version":"1","generated_at":"2026-07-23T19:43:45+00:00","cve":"CVE-2012-5164","urls":{"html":"https://cve.report/CVE-2012-5164","api":"https://cve.report/api/cve/CVE-2012-5164.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2012-5164","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2012-5164"},"summary":{"title":"CVE-2012-5164","description":"Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the term parameter to (1) autocomplete.php, (2) search/ajax/autosuggest.php, (3) livesuggest.php, or (4) save.php in frontend/modules/search/ajax.","state":"PUBLISHED","assigner":"mitre","published_at":"2012-09-26 00:55:01","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/78957","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/78957","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://github.com/forkcms/forkcms/commit/641e27bf1e9a7e320d6856399a7c274934bb351e","name":"https://github.com/forkcms/forkcms/commit/641e27bf1e9a7e320d6856399a7c274934bb351e","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"],"title":"XSS: Escape the input on ajax searches. · forkcms/forkcms@641e27b · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.fork-cms.com/blog/detail/fork-cms-3-2-7-released","name":"http://www.fork-cms.com/blog/detail/fork-cms-3-2-7-released","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Fork CMS 3.2.7 released - Blog - Fork CMS","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://github.com/forkcms/forkcms/pull/247","name":"https://github.com/forkcms/forkcms/pull/247","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"XSS: Escape the input on ajax searches. by jelmersnoeck · Pull Request #247 · forkcms/forkcms · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://github.com/forkcms/forkcms/commit/03e8f5b53f193a87116b3875eec39769d5c07114","name":"https://github.com/forkcms/forkcms/commit/03e8f5b53f193a87116b3875eec39769d5c07114","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Merge pull request #247 from jelmersnoeck/xss-fix-ajax-search · forkcms/forkcms@03e8f5b · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-5164","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-5164","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"2.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"2.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"2.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"2.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"2.3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"2.3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"2.4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"2.4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"2.5.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"2.5.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"2.6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"2.6.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"2.6.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"2.6.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"2.6.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"2.6.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"2.6.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"2.6.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"2.6.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"2.6.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"2.6.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"2.6.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"2.6.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"2.6.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"3.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"3.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"3.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"3.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"3.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"3.1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"3.1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"3.1.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"3.1.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"3.1.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"3.1.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"3.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"3.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"3.2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"3.2.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"3.2.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"3.2.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"5164","vulnerable":"1","versionEndIncluding":"3.2.6","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fork-cms","cpe5":"fork_cms","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T20:58:03.164Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://github.com/forkcms/forkcms/commit/641e27bf1e9a7e320d6856399a7c274934bb351e"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://github.com/forkcms/forkcms/commit/03e8f5b53f193a87116b3875eec39769d5c07114"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.fork-cms.com/blog/detail/fork-cms-3-2-7-released"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://github.com/forkcms/forkcms/pull/247"},{"name":"fork-multiple-xss(78957)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/78957"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2012-03-01T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the term parameter to (1) autocomplete.php, (2) search/ajax/autosuggest.php, (3) livesuggest.php, or (4) save.php in frontend/modules/search/ajax."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"https://github.com/forkcms/forkcms/commit/641e27bf1e9a7e320d6856399a7c274934bb351e"},{"tags":["x_refsource_CONFIRM"],"url":"https://github.com/forkcms/forkcms/commit/03e8f5b53f193a87116b3875eec39769d5c07114"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.fork-cms.com/blog/detail/fork-cms-3-2-7-released"},{"tags":["x_refsource_MISC"],"url":"https://github.com/forkcms/forkcms/pull/247"},{"name":"fork-multiple-xss(78957)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/78957"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2012-5164","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the term parameter to (1) autocomplete.php, (2) search/ajax/autosuggest.php, (3) livesuggest.php, or (4) save.php in frontend/modules/search/ajax."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"https://github.com/forkcms/forkcms/commit/641e27bf1e9a7e320d6856399a7c274934bb351e","refsource":"CONFIRM","url":"https://github.com/forkcms/forkcms/commit/641e27bf1e9a7e320d6856399a7c274934bb351e"},{"name":"https://github.com/forkcms/forkcms/commit/03e8f5b53f193a87116b3875eec39769d5c07114","refsource":"CONFIRM","url":"https://github.com/forkcms/forkcms/commit/03e8f5b53f193a87116b3875eec39769d5c07114"},{"name":"http://www.fork-cms.com/blog/detail/fork-cms-3-2-7-released","refsource":"CONFIRM","url":"http://www.fork-cms.com/blog/detail/fork-cms-3-2-7-released"},{"name":"https://github.com/forkcms/forkcms/pull/247","refsource":"MISC","url":"https://github.com/forkcms/forkcms/pull/247"},{"name":"fork-multiple-xss(78957)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/78957"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2012-5164","datePublished":"2012-09-26T00:00:00.000Z","dateReserved":"2012-09-25T00:00:00.000Z","dateUpdated":"2024-08-06T20:58:03.164Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2012-09-26 00:55:01","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.6","matchCriteriaId":"991AA820-6999-41A5-9BBC-AAB8549FA093"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"04865811-D4B6-48F5-B6F8-CFBD94982042"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1552D83A-FF47-4E4F-8443-0AE5E15AB610"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"7D4185C5-72A7-4F24-9E89-414B4DE0C794"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"5D4496EC-0341-467C-933D-83C99984F848"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"B3353A5A-85B7-48C3-A323-39CFE6C063B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"CA075476-C327-41B0-B8F9-B82B4B1FDD3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"92D83C75-86E8-469D-8AC2-B65ABB794B0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"20431B98-AF44-4629-BCA2-D50E7DBE15F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"16B58D49-E05B-40C9-B623-F763E2C56621"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"D01B0E6B-42A2-418E-8655-142482446E4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"483398DC-3F20-4197-94B0-691DE60E33BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"44BB4F2D-A5CA-4101-89F1-25224A595D95"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"F53B800E-ADB0-4222-87F2-0F2FD731447F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"098D6120-E54D-4FF8-9D8A-FA3D22AAB821"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"EE0E9C09-00F9-4843-B7B7-BBDD6AC4A7CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"A7E17327-D85F-4676-8D78-3BD800220FD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"86E5FF4D-09BF-4F69-B4F0-3407E92AB024"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"7B9A1683-6E5D-4542-AC00-C7E200EDA3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"01DB78DA-56F0-465E-B7BE-BA19FC6A062C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"9227B38E-8363-4515-B698-3408968D9856"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"671A43F3-E9EB-405C-A770-A6C86F7A3BB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"87512DA7-0F13-4642-929D-AA73599D5A77"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"6B6DD3CA-3548-4347-A607-8D0C8D47DD97"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:2.6.13:*:*:*:*:*:*:*","matchCriteriaId":"38E0C06A-B2A7-41A8-96F5-4F8B72D11BAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B5A29A25-D710-4038-BAF6-E94D42BD4505"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A5D03DB0-4371-4867-B93B-4649932132F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F0575A8C-EE3B-45C7-B023-79FA8A9484F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"CCF9AA18-A518-4377-B44B-C11531EB4DB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"BBF37511-B776-4BF4-95D4-23E6564F3482"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"01617BA1-36BC-4A29-9C50-9205B2A4FC3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"8C6F4126-98AD-48A6-BE9D-112A24AB9CB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:3.1.6:*:*:*:*:*:*:*","matchCriteriaId":"6600EE62-8DF9-4B23-AFA5-A46050B2395B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:3.1.7:*:*:*:*:*:*:*","matchCriteriaId":"9FB676F0-C59F-4E1B-BD13-6379B7989B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:3.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C1B632F4-F60E-4D6E-AC4E-C3D4C97DC3A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:3.1.9:*:*:*:*:*:*:*","matchCriteriaId":"502BCE30-1C75-4ECF-B13F-52BD11655FC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2603FC89-C95A-4AB0-A113-E2C0C3B8C156"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8F92CCA1-C40C-477B-A584-DB122B2FEC98"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6B5340B4-46C5-4237-9323-FE0A69A9772B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"4481E484-0B63-4E6C-9EFE-B7F6ED80DAFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"23B9738D-A6BD-4D66-938C-05176D0A3DB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fork-cms:fork_cms:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"09F544A7-D7C6-47A1-B633-42A36B3F9CBC"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2012","CveId":"5164","Ordinal":"1","Title":"CVE-2012-5164","CVE":"CVE-2012-5164","Year":"2012"},"notes":[{"CveYear":"2012","CveId":"5164","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the term parameter to (1) autocomplete.php, (2) search/ajax/autosuggest.php, (3) livesuggest.php, or (4) save.php in frontend/modules/search/ajax.","Type":"Description","Title":"CVE-2012-5164"},{"CveYear":"2012","CveId":"5164","Ordinal":"2","NoteData":"2012-09-25","Type":"Other","Title":"Published"},{"CveYear":"2012","CveId":"5164","Ordinal":"3","NoteData":"2017-08-28","Type":"Other","Title":"Modified"}]}}}