CVE-2018-16636

Nucleus CMS 3.70 allows HTML Injection via the index.php body parameter.

CVSS v3 6.5 MEDIUM
CVSS v2.0 4.0 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector : AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

4.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:N/I:P/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://github.com/NucleusCMS/NucleusCMS/issues/84	Exploit Issue Tracking Third Party Advisory
https://github.com/security-breachlock/CVE-2018-16636/blob/master/nucleus_html.pdf	Exploit Third Party Advisory
https://github.com/NucleusCMS/NucleusCMS/issues/84	Exploit Issue Tracking Third Party Advisory
https://github.com/security-breachlock/CVE-2018-16636/blob/master/nucleus_html.pdf	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:nucleuscms:nucleus_cms:3.70:*:*:*:*:*:*:*

History

No history.

Information

Published : 2018-12-10 19:29

Updated : 2024-11-21 03:53

NVD link : CVE-2018-16636

Mitre link : CVE-2018-16636

CVE.ORG link : CVE-2018-16636

JSON object : View

Products Affected

nucleuscms

nucleus_cms

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"id": "CVE-2018-16636", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2018-12-10T19:29:25.297", "references": [{"url": "https://github.com/NucleusCMS/NucleusCMS/issues/84", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/security-breachlock/CVE-2018-16636/blob/master/nucleus_html.pdf", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/NucleusCMS/NucleusCMS/issues/84", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/security-breachlock/CVE-2018-16636/blob/master/nucleus_html.pdf", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Nucleus CMS 3.70 allows HTML Injection via the index.php body parameter."}, {"lang": "es", "value": "Se ha descubierto un problema en MISP en versiones 2.4.9x anteriores a la 2.4.99. En app/Model/Event.php (el c\u00f3digo de importaci\u00f3n STIX 1), una cadena de nombre de archivo sin escapar se emplea para construir un comando shell. Esta vulnerabilidad puede ser aprovechada por un usuario autenticado malicioso para ejecutar comandos arbitrarios cambiando el nombre de archivo original de la importaci\u00f3n STIX."}], "lastModified": "2024-11-21T03:53:06.423", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nucleuscms:nucleus_cms:3.70:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "46F233CA-7E3D-4C07-868D-962CB9D589D8"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}