FKIE_CVE-2012-3805

Vulnerability from fkie_nvd - Published: 2012-07-12 19:55 - Updated: 2026-06-16 23:43
Severity
Summary
Multiple cross-site scripting (XSS) vulnerabilities in the getAllPassedParams function in system/functions.php in Kajona before 3.4.2 allow remote attackers to inject arbitrary web script or HTML via the (1) absender_name, (2) absender_email, or (3) absender_nachricht parameter to the content page; (4) comment_name, (5) comment_subject, or (6) comment_message parameter to the postacomment module; (7) module parameter to index.php; (8) action parameter to the admin login page; (9) pv or (10) pe parameter in a list action to the user module; (11) user_username, (12) user_email, (13) user_forename, (14) user_name, (15) user_street, (16) user_postal, (17) user_city, (18) user_tel, or (19) user_mobil parameter in a newUser action to the user module; (20) group_name or (21) group_desc parameter in a groupNew action to the user module; (22) name, (23) browsername, (24) seostring, (25) keywords, or (26) folder_id parameter in a newPage action to the pages module; (27) element_name or (28) element_cachetime parameter in a newElement action in the pages module; (29) aspect_name parameter in a newAspect action in the system module; (30) filemanager_name, (31) filemanager_path, (32) filemanager_upload_filter, or (33) filemanager_view_filter parameter in a NewRepo action to the filemanager module; or (34) archive_title or (35) archive_path parameter in a newArchive action to the downloads module. NOTE: some of these details are obtained from third party information.
References
cve@mitre.orghttp://archives.neohapsis.com/archives/bugtraq/2012-07/0058.htmlExploit
cve@mitre.orghttp://secunia.com/advisories/49849Vendor Advisory
cve@mitre.orghttp://www.kajona.de/changelog_34x.de.html
cve@mitre.orghttp://www.kajona.de/newsdetails.Kajona-V3-4-2-available.newsDetail.616decb4fe9b7a5929fb.en.htmlVendor Advisory
cve@mitre.orghttps://www.htbridge.com/advisory/HTB23097
af854a3a-2127-422b-91ae-364da2661108http://archives.neohapsis.com/archives/bugtraq/2012-07/0058.htmlExploit
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/49849Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.kajona.de/changelog_34x.de.html
af854a3a-2127-422b-91ae-364da2661108http://www.kajona.de/newsdetails.Kajona-V3-4-2-available.newsDetail.616decb4fe9b7a5929fb.en.htmlVendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://www.htbridge.com/advisory/HTB23097
Impacted products
Vendor Product Version
kajona kajona *
kajona kajona 3.1.0
kajona kajona 3.1.1
kajona kajona 3.2.0
kajona kajona 3.2.1
kajona kajona 3.3.0
kajona kajona 3.3.1
kajona kajona 3.4.0
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:kajona:kajona:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AA061A25-8408-46CD-9D31-7ADFB10B617E",
              "versionEndIncluding": "3.4.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kajona:kajona:3.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "AE6388BC-F077-4D3F-839D-33611EC25461",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kajona:kajona:3.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "747EBA09-8276-4BFA-B832-04FD9AEE4F58",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kajona:kajona:3.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "EE2C0E7E-3D1E-4206-84E2-D48ED54EDCC1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kajona:kajona:3.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "A7BF706D-9ECB-4EE1-AF96-227CBE7FB906",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kajona:kajona:3.3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "2B0F01B3-E14F-4D3D-9222-20F85CCF2905",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kajona:kajona:3.3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "48EBF205-450C-412C-8285-2A74C26EE74D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kajona:kajona:3.4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "4C308CB9-A481-49F3-AED2-19F01BEE4688",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple cross-site scripting (XSS) vulnerabilities in the getAllPassedParams function in system/functions.php in Kajona before 3.4.2 allow remote attackers to inject arbitrary web script or HTML via the (1) absender_name, (2) absender_email, or (3) absender_nachricht parameter to the content page; (4) comment_name, (5) comment_subject, or (6) comment_message parameter to the postacomment module; (7) module parameter to index.php; (8) action parameter to the admin login page; (9) pv or (10) pe parameter in a list action to the user module; (11) user_username, (12) user_email, (13) user_forename, (14) user_name, (15) user_street, (16) user_postal, (17) user_city, (18) user_tel, or (19) user_mobil parameter in a newUser action to the user module; (20) group_name or (21) group_desc parameter in a groupNew action to the user module; (22) name, (23) browsername, (24) seostring, (25) keywords, or (26) folder_id parameter in a newPage action to the pages module; (27) element_name or (28) element_cachetime parameter in a newElement action in the pages module; (29) aspect_name parameter in a newAspect action in the system module; (30) filemanager_name, (31) filemanager_path, (32) filemanager_upload_filter, or (33) filemanager_view_filter parameter in a NewRepo action to the filemanager module; or (34) archive_title or (35) archive_path parameter in a newArchive action to the downloads module.  NOTE: some of these details are obtained from third party information."
    },
    {
      "lang": "es",
      "value": "M\u00faltiples vulnerabilidades de tipo cross-site scripting (XSS) en la funci\u00f3n getAllPassedParams en el archivo system/functions.php en Kajona anterior a versi\u00f3n 3.4.2, permiten a los atacantes remotos inyectar script web o HTML arbitrario por medio del par\u00e1metro (1) absender_name, (2) absender_email o (3) absender_nachricht en la p\u00e1gina contetnt; par\u00e1metro (4) comment_name, (5) comment_subject o (6) comment_message en el m\u00f3dulo postacomment; (7) par\u00e1metro module en archivo index.php; (8) par\u00e1metro action en la p\u00e1gina admin login; par\u00e1metro (9) pv o (10) pe en una acci\u00f3n list en el m\u00f3dulo user; par\u00e1metro (11) user_username, (12) user_email, (13) user_forename, (14) user_name, (15) user_street, (16) user_mail, (17) user_city, (18) user_tel o (19) user_mobil en una acci\u00f3n newUser en el m\u00f3dulo user; par\u00e1metro (20) group_name o (21) group_desc en una acci\u00f3n groupNew en el m\u00f3dulo user; par\u00e1metro (22) name, (23) browsername, (24) seostring, (25) keywords o (26) folder_id en una acci\u00f3n newPage en el m\u00f3dulo pages; par\u00e1metro (27) element_name o (28) element_cachetime en una acci\u00f3n newElement en el m\u00f3dulo pages; (29) par\u00e1metro aspect_name en una acci\u00f3n newAspect en el m\u00f3dulo del system; par\u00e1metro (30) filemanager_name, (31) filemanager_path, (32) filemanager_upload_filter o (33) filemanager_view_filter en una acci\u00f3n NewRepo en el m\u00f3dulo filemanager; o par\u00e1metro (34) archive_title o (35) archive_path en una acci\u00f3n newArchive en el m\u00f3dulo downloads. NOTA: algunos de estos datos se obtienen de la informaci\u00f3n de terceros."
    }
  ],
  "id": "CVE-2012-3805",
  "lastModified": "2026-06-16T23:43:55.010",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2012-07-12T19:55:06.967",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://archives.neohapsis.com/archives/bugtraq/2012-07/0058.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/49849"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.kajona.de/changelog_34x.de.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.kajona.de/newsdetails.Kajona-V3-4-2-available.newsDetail.616decb4fe9b7a5929fb.en.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.htbridge.com/advisory/HTB23097"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://archives.neohapsis.com/archives/bugtraq/2012-07/0058.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/49849"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.kajona.de/changelog_34x.de.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.kajona.de/newsdetails.Kajona-V3-4-2-available.newsDetail.616decb4fe9b7a5929fb.en.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.htbridge.com/advisory/HTB23097"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.