{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2018-11-21T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "Nucleus CMS 3.70 allows HTML Injection via the index.php body parameter."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2019-02-20T16:57:01.000Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://github.com/NucleusCMS/NucleusCMS/issues/84"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/security-breachlock/CVE-2018-16636/blob/master/nucleus_html.pdf"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2018-16636", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Nucleus CMS 3.70 allows HTML Injection via the index.php body parameter."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://github.com/NucleusCMS/NucleusCMS/issues/84", "refsource": "CONFIRM", "url": "https://github.com/NucleusCMS/NucleusCMS/issues/84"}, {"name": "https://github.com/security-breachlock/CVE-2018-16636/blob/master/nucleus_html.pdf", "refsource": "MISC", "url": "https://github.com/security-breachlock/CVE-2018-16636/blob/master/nucleus_html.pdf"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T10:32:53.526Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/NucleusCMS/NucleusCMS/issues/84"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/security-breachlock/CVE-2018-16636/blob/master/nucleus_html.pdf"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2018-16636", "datePublished": "2018-12-10T18:00:00.000Z", "dateReserved": "2018-09-06T00:00:00.000Z", "dateUpdated": "2024-08-05T10:32:53.526Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "source": "[email protected]"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:nucleuscms:nucleus_cms:3.70:*:*:*:*:*:*:*", "matchCriteriaId": "46F233CA-7E3D-4C07-868D-962CB9D589D8", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Nucleus CMS 3.70 allows HTML Injection via the index.php body parameter."}, {"lang": "es", "value": "Se ha descubierto un problema en MISP en versiones 2.4.9x anteriores a la 2.4.99. En app/Model/Event.php (el c\u00f3digo de importaci\u00f3n STIX 1), una cadena de nombre de archivo sin escapar se emplea para construir un comando shell. Esta vulnerabilidad puede ser aprovechada por un usuario autenticado malicioso para ejecutar comandos arbitrarios cambiando el nombre de archivo original de la importaci\u00f3n STIX."}], "id": "CVE-2018-16636", "lastModified": "2026-06-17T01:44:35.457", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "[email protected]", "type": "Primary"}]}, "published": "2018-12-10T19:29:25.297", "references": [{"source": "[email protected]", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "url": "https://github.com/NucleusCMS/NucleusCMS/issues/84"}, {"source": "[email protected]", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/security-breachlock/CVE-2018-16636/blob/master/nucleus_html.pdf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "url": "https://github.com/NucleusCMS/NucleusCMS/issues/84"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/security-breachlock/CVE-2018-16636/blob/master/nucleus_html.pdf"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "[email protected]", "type": "Primary"}]}

{}