CVE-2012-4675

Опубликовано: 26 авг. 2012

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in PluXml 5.1.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to file update.

Ссылки

http://secunia.com/advisories/49026
Vendor Advisory
http://telechargements.pluxml.org/changelog
http://www.pluxml.org/article59/sortie-de-pluxml-5-1-6
http://www.securityfocus.com/bid/53367
https://exchange.xforce.ibmcloud.com/vulnerabilities/75331
http://secunia.com/advisories/49026
Vendor Advisory
http://telechargements.pluxml.org/changelog
http://www.pluxml.org/article59/sortie-de-pluxml-5-1-6
http://www.securityfocus.com/bid/53367
https://exchange.xforce.ibmcloud.com/vulnerabilities/75331

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:pluxml:pluxml:*:*:*:*:*:*:*:*

Версия до 5.1.5 (включая)

EPSS

Процентиль: 65%

0.01161

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2012-4675

debian

почти 14 лет назад

Cross-site scripting (XSS) vulnerability in PluXml 5.1.6 allows remote ...

GHSA-3gx9-chfw-vff5

github

больше 4 лет назад