Lucene search

[email protected]CVE-2012-3830

HistoryJul 03, 2012 - 10:55 p.m.

CVE-2012-3830

2012-07-0322:55:02

CWE-79

[email protected]

web.nvd.nist.gov

cve-2012-3830

xss

vulnerability

decoda

web script

html

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.6%

JSON

Cross-site scripting (XSS) vulnerability in decoda/templates/video.php in Decoda before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via the video directive.

Affected configurations

NVD

Node

milesjdecodaRange≤3.3.1

milesjdecodaMatch2.2

milesjdecodaMatch2.3

milesjdecodaMatch2.4

milesjdecodaMatch2.5

milesjdecodaMatch2.6

milesjdecodaMatch2.7

milesjdecodaMatch2.8

milesjdecodaMatch2.9

milesjdecodaMatch3.0

milesjdecodaMatch3.1

milesjdecodaMatch3.2

milesjdecodaMatch3.3

CPENameOperatorVersion
milesj:decodamilesj decodale3.3.1
milesj:decodamilesj decodaeq2.2
milesj:decodamilesj decodaeq2.3
milesj:decodamilesj decodaeq2.4
milesj:decodamilesj decodaeq2.5
milesj:decodamilesj decodaeq2.6
milesj:decodamilesj decodaeq2.7
milesj:decodamilesj decodaeq2.8
milesj:decodamilesj decodaeq2.9
milesj:decodamilesj decodaeq3.0

CPE	Name	Operator	Version
milesj:decoda	milesj decoda	le	3.3.1
milesj:decoda	milesj decoda	eq	2.2
milesj:decoda	milesj decoda	eq	2.3
milesj:decoda	milesj decoda	eq	2.4
milesj:decoda	milesj decoda	eq	2.5
milesj:decoda	milesj decoda	eq	2.6
milesj:decoda	milesj decoda	eq	2.7
milesj:decoda	milesj decoda	eq	2.8
milesj:decoda	milesj decoda	eq	2.9
milesj:decoda	milesj decoda	eq	3.0

Rows per page:

1-10 of 131

References

osvdb.org/81637

secunia.com/advisories/48931

www.redteam-pentesting.de/en/advisories/rt-sa-2012-002/-php-decoda-cross-site-scripting-in-video-tags

www.securityfocus.com/bid/53332

exchange.xforce.ibmcloud.com/vulnerabilities/75333

github.com/milesj/php-decoda/commit/4068257bb4e1071d1d60577289d3da922c296c83

github.com/milesj/php-decoda/commit/666778f326dff3bd213be9f624f0fcb337c0b4c9

Social References

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.6%

JSON

Related for CVE-2012-3830

prion1 nvd1 cvelist1