CVE-2012-4018

2012-10-0510:00:00

jpcert

www.cve.org

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.4%

JSON

Cross-site scripting (XSS) vulnerability in Final Beta Laboratory MyWebSearch before 1.23 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.

References

finalbeta.jp/library/perl/mwsearch.html

jvn.jp/en/jp/JVN58160713/index.html

jvndb.jvn.jp/jvndb/JVNDB-2012-000092

exchange.xforce.ibmcloud.com/vulnerabilities/79059