CVE-2012-5321
medium · 5.8A public exploit / detection template exists
Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →
tiki-featured_link.php in TikiWiki CMS/Groupware 8.3 allows remote attackers to load arbitrary web site pages into frames and conduct phishing attacks via the url parameter, aka "frame injection."
5.8
CVSS
13.8%
EPSS (exploit prob.)
96th
EPSS percentile
2012-10-08
Published
AV:N/AC:M/Au:N/C:P/I:P/A:N
Weaknesses
CWE-20
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| tiki | tikiwiki_cms/groupware | 8.3 |
Check a specific version with /api/v1/cve/match.
References
- http://osvdb.org/79409
- http://secunia.com/advisories/48102
- http://st2tea.blogspot.com/2012/02/tiki-wiki-cms-groupware-frame-injection.html
- http://www.securityfocus.com/bid/52079
- http://www.securitytracker.com/id?1026708
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73403
- http://osvdb.org/79409
- http://secunia.com/advisories/48102
- http://st2tea.blogspot.com/2012/02/tiki-wiki-cms-groupware-frame-injection.html
- http://www.securityfocus.com/bid/52079
- http://www.securitytracker.com/id?1026708
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73403
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2012-5321