Vulnerabilities
Misconfiguration
Runtime Security
Compliance
CVE Vulnerabilities

CVE-2012-6112

Published: Jan 27, 2013 | Modified: Dec 01, 2020
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2012-6112
CWEhttps://cwe.mitre.org/data/definitions/264.html

classes/GoogleSpell.php in the PHP Spellchecker (aka Google Spellchecker) addon before 2.0.6.1 for TinyMCE, as used in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 and other products, does not properly handle control characters, which allows remote attackers to trigger arbitrary outbound HTTP requests via a crafted string.

Affected Software

Name Vendor Start Version End Version
Spellchecker_php Tinymce 2.0 (including) 2.0 (including)
Spellchecker_php Tinymce 2.0-a1 (including) 2.0-a1 (including)
Spellchecker_php Tinymce 2.0-a2 (including) 2.0-a2 (including)
Spellchecker_php Tinymce 2.0-b1 (including) 2.0-b1 (including)
Spellchecker_php Tinymce 2.0-b2 (including) 2.0-b2 (including)
Spellchecker_php Tinymce 2.0-b3 (including) 2.0-b3 (including)
Spellchecker_php Tinymce 2.0-rc1 (including) 2.0-rc1 (including)
Spellchecker_php Tinymce 2.0.1 (including) 2.0.1 (including)
Spellchecker_php Tinymce 2.0.2 (including) 2.0.2 (including)
Spellchecker_php Tinymce 2.0.3 (including) 2.0.3 (including)
Spellchecker_php Tinymce 2.0.6 (including) 2.0.6 (including)
Tinymce Ubuntu artful *
Tinymce Ubuntu bionic *
Tinymce Ubuntu cosmic *
Tinymce Ubuntu disco *
Tinymce Ubuntu eoan *
Tinymce Ubuntu groovy *
Tinymce Ubuntu hardy *
Tinymce Ubuntu lucid *
Tinymce Ubuntu oneiric *
Tinymce Ubuntu precise *
Tinymce Ubuntu quantal *
Tinymce Ubuntu raring *
Tinymce Ubuntu saucy *
Tinymce Ubuntu trusty *
Tinymce Ubuntu utopic *
Tinymce Ubuntu vivid *
Tinymce Ubuntu wily *
Tinymce Ubuntu xenial *
Tinymce Ubuntu yakkety *
Tinymce Ubuntu zesty *
Tinymce2 Ubuntu lucid *
Tinymce2 Ubuntu oneiric *
Tinymce2 Ubuntu precise *
Tinymce2 Ubuntu quantal *
Tinymce2 Ubuntu raring *
Tinymce2 Ubuntu saucy *

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2024 Aqua Security Software Ltd.   Privacy Policy | Terms of Use