CVE-2012-1261

Опубликовано: 09 янв. 2020

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in cgi-bin/scrut_fa_exclusions.cgi in Plixer International Scrutinizer NetFlow and sFlow Analyzer 8.6.2.16204 and other versions before 9.0.1.19899 allows remote attackers to inject arbitrary web script or HTML via the standalone parameter.

Ссылки

http://packetstormsecurity.org/files/111791/Scrutinizer-8.6.2-Bypass-Cross-Site-Scripting-SQL-Injection.html
Exploit
Third Party Advisory
http://www.exploit-db.com/exploits/18750
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/52989
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/74827
Third Party Advisory
VDB Entry
https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/twsl2012-008-multiple-vulnerabilities-in-scrutinizer-netflow-sflow-analyzer/
Third Party Advisory
http://packetstormsecurity.org/files/111791/Scrutinizer-8.6.2-Bypass-Cross-Site-Scripting-SQL-Injection.html
Exploit
Third Party Advisory
http://www.exploit-db.com/exploits/18750
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/52989
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/74827
Third Party Advisory
VDB Entry
https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/twsl2012-008-multiple-vulnerabilities-in-scrutinizer-netflow-sflow-analyzer/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:plixer:scrutinizer_netflow_\&_sflow_analyzer:*:*:*:*:*:*:*:*

Версия до 8.6.2.16204 (включая)

EPSS

Процентиль: 90%

0.05577

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-v5rj-5gg5-mchf

github

почти 4 года назад