Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2012-3414

Опубликовано: 19 июл. 2013
Источник: nvd
CVSS2: 4.3
EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload 2.2.0.1 and earlier, as used in WordPress before 3.3.2, TinyMCE Image Manager 1.1, and other products, allows remote attackers to inject arbitrary web script or HTML via the movieName parameter, related to the "ExternalInterface.call" function.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:swfupload_project:swfupload:*:*:*:*:*:*:*:*
Версия до 2.2.0.1 (включая)
cpe:2.3:a:swfupload_project:swfupload:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:swfupload_project:swfupload:2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:swfupload_project:swfupload:2.1.0:*:*:*:*:*:*:*
cpe:2.3:a:swfupload_project:swfupload:2.2.0:*:*:*:*:*:*:*
cpe:2.3:a:tinymce:image_manager:1.1:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*
Версия до 3.3.1 (включая)
cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.0:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.0.1:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.0.2:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.0.3:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.0.4:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.0.5:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.0.6:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.1:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.1.1:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.1.2:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.1.3:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.1.4:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.2:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.2.1:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:3.3:*:*:*:*:*:*:*

EPSS

Процентиль: 88%
0.04335
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

ubuntu логотип

CVE-2012-3414

ubuntu
почти 12 лет назад

Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload 2.2.0.1 and earlier, as used in WordPress before 3.3.2, TinyMCE Image Manager 1.1, and other products, allows remote attackers to inject arbitrary web script or HTML via the movieName parameter, related to the "ExternalInterface.call" function.

debian логотип

CVE-2012-3414

debian
почти 12 лет назад

Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload ...

github логотип

GHSA-89mv-5c9h-c8f7

github
около 3 лет назад

Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload 2.2.0.1 and earlier, as used in WordPress before 3.3.2, TinyMCE Image Manager 1.1, and other products, allows remote attackers to inject arbitrary web script or HTML via the movieName parameter, related to the "ExternalInterface.call" function.

EPSS

Процентиль: 88%
0.04335
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79