CVE-2012-6132

Опубликовано: 10 апр. 2014

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the otk parameter.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:roundup-tracker:roundup:*:*:*:*:*:*:*:*

Версия до 1.4.19 (включая)

cpe:2.3:a:roundup-tracker:roundup:1.4.0:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.4.1:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.4.2:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.4.3:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.4.4:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.4.5:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.4.6:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.4.7:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.4.8:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.4.9:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.4.10:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.4.11:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.4.12:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.4.13:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.4.14:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.4.15:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.4.16:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.4.17:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.4.18:*:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.01837

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2012-6132

ubuntu

больше 12 лет назад

Cross-site scripting (XSS) vulnerability in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the otk parameter.

CVE-2012-6132

debian

больше 12 лет назад

Cross-site scripting (XSS) vulnerability in Roundup before 1.4.20 allo ...

GHSA-5v6q-xqq8-g4xj

github

больше 4 лет назад

Roundup Cross-site Scripting (XSS) vulnerability

EPSS

Процентиль: 77%

0.01837

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79