{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the telerik HTML editor in DotNetNuke before 5.6.4 and 6.x before 6.1.0 allows remote attackers to inject arbitrary web script or HTML via a message."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2012-04-11T10:00:00Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://technet.microsoft.com/en-us/security/msvr/msvr12-002"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.dotnetnuke.com/News/Security-Policy/Security-bulletin-no.59.aspx"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2012-1036", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cross-site scripting (XSS) vulnerability in the telerik HTML editor in DotNetNuke before 5.6.4 and 6.x before 6.1.0 allows remote attackers to inject arbitrary web script or HTML via a message."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://technet.microsoft.com/en-us/security/msvr/msvr12-002", "refsource": "MISC", "url": "http://technet.microsoft.com/en-us/security/msvr/msvr12-002"}, {"name": "http://www.dotnetnuke.com/News/Security-Policy/Security-bulletin-no.59.aspx", "refsource": "CONFIRM", "url": "http://www.dotnetnuke.com/News/Security-Policy/Security-bulletin-no.59.aspx"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T18:45:26.763Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://technet.microsoft.com/en-us/security/msvr/msvr12-002"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.dotnetnuke.com/News/Security-Policy/Security-bulletin-no.59.aspx"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2012-1036", "datePublished": "2012-04-11T10:00:00Z", "dateReserved": "2012-02-08T00:00:00Z", "dateUpdated": "2024-09-16T17:34:31.589Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:*:*:*:*:*:*:*:*", "matchCriteriaId": "869CAA52-4241-4049-A018-A2E3551AED90", "versionEndIncluding": "5.6.3", "vulnerable": true}, {"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:4.9.0:*:*:*:*:*:*:*", "matchCriteriaId": "6EB0D105-8943-4DC8-A513-064B1ABC4A9D", "vulnerable": true}, {"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:4.9.1:*:*:*:*:*:*:*", "matchCriteriaId": "403D90A9-C191-496A-BBB9-4915D39B675D", "vulnerable": true}, {"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:4.9.2:*:*:*:*:*:*:*", "matchCriteriaId": "6B40DA1D-12CF-4DFF-9364-D60A53ED898D", "vulnerable": true}, {"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:4.9.3:*:*:*:*:*:*:*", "matchCriteriaId": "39FED945-3341-4736-95C4-88CFE8B48E83", "vulnerable": true}, {"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:4.9.4:*:*:*:*:*:*:*", "matchCriteriaId": "4B9C52F9-E7B7-4EA2-84FD-C78A3EF17893", "vulnerable": true}, {"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:4.9.5:*:*:*:*:*:*:*", "matchCriteriaId": "4EFE03E3-0F41-4921-916F-56CDCCE77602", "vulnerable": true}, {"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:5.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "A7C8162B-2426-48F5-A143-FA7425F961B2", "vulnerable": true}, {"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:5.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "40D39FE4-5D47-462B-B46E-19F6BE2F6197", "vulnerable": true}, {"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:5.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "0DD98E0F-ABC7-43CF-B2C2-D0027D3D27B0", "vulnerable": true}, {"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:5.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "DFAD2896-6A9C-4953-8074-E689F359C900", "vulnerable": true}, {"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:5.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "74B90994-F7F0-4BC9-99E4-E798B98899AD", "vulnerable": true}, {"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:5.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "9A6FB531-44C1-4EA1-B69D-0D591673D7C2", "vulnerable": true}, {"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:5.1.4:*:*:*:*:*:*:*", "matchCriteriaId": "2B3A0857-2E5D-4BCD-AAE6-D50FCAE6FF67", "vulnerable": true}, {"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:5.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "E96050B6-DE09-49DF-8D6D-1F110AC609EC", "vulnerable": true}, {"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:5.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "7E32FB03-B65E-4FD3-9595-ED8D19F2ABD8", "vulnerable": true}, {"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:5.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "AEF953F4-BCAB-4FBA-AEA1-3846E0C19BCD", "vulnerable": true}, {"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:5.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "3CD34D98-57B1-4567-B22A-69BCDA96367B", "vulnerable": true}, {"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:5.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "5E7DD606-ACEC-49F7-968B-93CE92DE0FAD", "vulnerable": true}, {"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:5.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "C3364254-4E9D-4218-BAA6-366A59B3D278", "vulnerable": true}, {"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:5.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "DC69C5AD-E642-4975-BF78-0A87A98C0033", "vulnerable": true}, {"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:5.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "3CF511FB-9BF5-4282-BD46-E7B173B4C554", "vulnerable": true}, {"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:5.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "60DB93BB-9E8C-495C-B6F9-96DE89864A7D", "vulnerable": true}, {"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:5.4.3:*:*:*:*:*:*:*", "matchCriteriaId": "25638D29-3B1C-4093-B85F-622EC84168D2", "vulnerable": true}, {"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:5.4.4:*:*:*:*:*:*:*", "matchCriteriaId": "26FC5FB1-A6CA-4099-8068-6F01A3A15BB7", "vulnerable": true}, {"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:5.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "E1DE6781-FF23-41F3-AC24-4574DB091970", "vulnerable": true}, {"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:5.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "8E03F432-AAEC-49FC-97FE-C816FCC3D8E7", "vulnerable": true}, {"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:5.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "805FB485-A468-442F-94B0-FFC51FBB8891", "vulnerable": true}, {"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:5.6.1:*:*:*:*:*:*:*", "matchCriteriaId": "B8FC888B-C2EE-459B-9E57-C11C79BDDDBF", "vulnerable": true}, {"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:5.6.2:*:*:*:*:*:*:*", "matchCriteriaId": "2D38E404-2A46-4014-ABEB-DFAD5AB2EA95", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:6.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "AD207A4C-44F1-4847-B292-01C8C191B491", "vulnerable": true}, {"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:6.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "4BDAD531-DE65-4F97-A499-AB22F1141BDB", "vulnerable": true}, {"criteria": "cpe:2.3:a:dotnetnuke:dotnetnuke:6.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "BE49B821-1C36-4309-B51F-0CB8F79D2329", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the telerik HTML editor in DotNetNuke before 5.6.4 and 6.x before 6.1.0 allows remote attackers to inject arbitrary web script or HTML via a message."}, {"lang": "es", "value": "vulnerabilidad de ejecuci\u00f3n de secuencias de comandos en sitios cruzados (XSS) en el editor HTML telerik en DotNetNuke anteriores a v5.6.4 y v6.x anteriores a v6.1.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML a trav\u00e9s de un mensaje."}], "id": "CVE-2012-1036", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2012-04-11T10:39:26.387", "references": [{"source": "cve@mitre.org", "url": "http://technet.microsoft.com/en-us/security/msvr/msvr12-002"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www.dotnetnuke.com/News/Security-Policy/Security-bulletin-no.59.aspx"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://technet.microsoft.com/en-us/security/msvr/msvr12-002"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.dotnetnuke.com/News/Security-Policy/Security-bulletin-no.59.aspx"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}