CVE-2012-6149: Multiple XSS vulnerabilities in systems/sdc/notes.jsp in Spacewalk and RHN Satellite 5.
Reporter | Title | Published | Views | Family All 10 |
---|---|---|---|---|
![]() | Cross-site Scripting (XSS) | 15 Jan 201908:56 | – | veracode |
![]() | Cross-Site Scripting (XSS) | 2 May 201905:01 | – | veracode |
![]() | CRLF Injection | 2 May 201905:01 | – | veracode |
![]() | Remote Code Execution | 2 May 201905:01 | – | veracode |
![]() | Cross site scripting | 14 Feb 201415:55 | – | prion |
![]() | CVE-2012-6149 | 14 Feb 201415:00 | – | cvelist |
![]() | CVE-2012-6149 | 14 Feb 201415:55 | – | nvd |
![]() | (RHSA-2014:0148) Moderate: spacewalk-java, spacewalk-web and satellite-branding security update | 10 Feb 201400:00 | – | redhat |
![]() | RHSA-2014:0148 Red Hat Security Advisory: spacewalk-java, spacewalk-web and satellite-branding security update | 15 Sep 202421:19 | – | osv |
![]() | RHEL 5 / 6 : spacewalk-java, spacewalk-web and satellite-branding (RHSA-2014:0148) | 8 Nov 201400:00 | – | nessus |
Parameter | Position | Path | Description | CWE |
---|---|---|---|---|
subject | request body | systems/sdc/notes.jsp | Cross-site scripting (XSS) vulnerability allowing injection of malicious scripts through note values. | CWE-79 |
content | request body | systems/sdc/notes.jsp | Cross-site scripting (XSS) vulnerability allowing injection of malicious scripts through note values. | CWE-79 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo