Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2012-2648

Опубликовано: 07 авг. 2012
Источник: nvd
CVSS2: 4.3
EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the GoodReader app 3.16 and earlier for iOS on the iPad, and 3.15.1 and earlier for iOS on the iPhone and iPod touch, allows remote attackers to inject arbitrary web script or HTML via vectors involving use of this app in conjunction with a web browser.

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:goodiware:goodreader:*:-:*:*:*:iphone_os:*:*
Версия до 3.16 (включая)
cpe:2.3:a:goodiware:goodreader:1.1:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:2.0:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:2.1:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:2.2:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:2.3:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:2.4:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:2.5:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:2.5.1:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:2.6:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:2.7:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:2.7.4:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:2.8:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:2.8.4:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.0.0:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.0.1:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.0.2:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.0.3:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.1.0:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.1.2:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.2.0:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.3.0:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.3.1:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.4.0:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.4.1:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.5.0:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.5.1:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.6.0:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.6.1:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.7.0:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.7.1:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.8.0:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.9.0:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.10.0:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.10.1:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.10.2:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.10.3:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.11.0:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.11.1:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.12.0:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.13.0:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.13.1:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.14.0:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.14.2:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.15.0:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.15.1:-:*:*:*:iphone_os:*:*
cpe:2.3:h:apple:ipad:*:*:*:*:*:*:*:*
Конфигурация 2

Одновременно

Одно из

cpe:2.3:a:goodiware:goodreader:*:-:*:*:*:iphone_os:*:*
Версия до 3.15.1 (включая)
cpe:2.3:a:goodiware:goodreader:1.1:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:2.0:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:2.1:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:2.2:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:2.3:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:2.4:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:2.5:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:2.5.1:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:2.6:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:2.7:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:2.8.2:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:2.8.5:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.0.0:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.0.1:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.0.2:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.0.3:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.2.1:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.2.3:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.3.0:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.3.1:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.4.0:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.4.1:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.5.0:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.5.1:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.6.0:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.6.1:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.7.0:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.7.1:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.8.1:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.9.1:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.10.0:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.10.1:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.10.2:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.10.3:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.11.0:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.11.1:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.12.1:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.13.0:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.13.1:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.14.1:-:*:*:*:iphone_os:*:*
cpe:2.3:a:goodiware:goodreader:3.15.0:-:*:*:*:iphone_os:*:*

Одно из

cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

EPSS

Процентиль: 42%
0.00199
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

github
больше 3 лет назад

Cross-site scripting (XSS) vulnerability in the GoodReader app 3.16 and earlier for iOS on the iPad, and 3.15.1 and earlier for iOS on the iPhone and iPod touch, allows remote attackers to inject arbitrary web script or HTML via vectors involving use of this app in conjunction with a web browser.

EPSS

Процентиль: 42%
0.00199
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79