Логотип exploitDog
bind:CVE-2012-3414
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2012-3414

Количество 4

Количество 4

ubuntu логотип

CVE-2012-3414

почти 12 лет назад

Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload 2.2.0.1 and earlier, as used in WordPress before 3.3.2, TinyMCE Image Manager 1.1, and other products, allows remote attackers to inject arbitrary web script or HTML via the movieName parameter, related to the "ExternalInterface.call" function.

CVSS2: 4.3
EPSS: Низкий
nvd логотип

CVE-2012-3414

почти 12 лет назад

Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload 2.2.0.1 and earlier, as used in WordPress before 3.3.2, TinyMCE Image Manager 1.1, and other products, allows remote attackers to inject arbitrary web script or HTML via the movieName parameter, related to the "ExternalInterface.call" function.

CVSS2: 4.3
EPSS: Низкий
debian логотип

CVE-2012-3414

почти 12 лет назад

Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload ...

CVSS2: 4.3
EPSS: Низкий
github логотип

GHSA-89mv-5c9h-c8f7

около 3 лет назад

Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload 2.2.0.1 and earlier, as used in WordPress before 3.3.2, TinyMCE Image Manager 1.1, and other products, allows remote attackers to inject arbitrary web script or HTML via the movieName parameter, related to the "ExternalInterface.call" function.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2012-3414

Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload 2.2.0.1 and earlier, as used in WordPress before 3.3.2, TinyMCE Image Manager 1.1, and other products, allows remote attackers to inject arbitrary web script or HTML via the movieName parameter, related to the "ExternalInterface.call" function.

CVSS2: 4.3
4%
Низкий
почти 12 лет назад
nvd логотип
CVE-2012-3414

Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload 2.2.0.1 and earlier, as used in WordPress before 3.3.2, TinyMCE Image Manager 1.1, and other products, allows remote attackers to inject arbitrary web script or HTML via the movieName parameter, related to the "ExternalInterface.call" function.

CVSS2: 4.3
4%
Низкий
почти 12 лет назад
debian логотип
CVE-2012-3414

Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload ...

CVSS2: 4.3
4%
Низкий
почти 12 лет назад
github логотип
GHSA-89mv-5c9h-c8f7

Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload 2.2.0.1 and earlier, as used in WordPress before 3.3.2, TinyMCE Image Manager 1.1, and other products, allows remote attackers to inject arbitrary web script or HTML via the movieName parameter, related to the "ExternalInterface.call" function.

4%
Низкий
около 3 лет назад

Уязвимостей на страницу