Lucene search

K

MitreCVELIST:CVE-2012-4751

HistoryOct 22, 2012 - 4:00 p.m.

CVE-2012-4751

2012-10-2216:00:00

mitre

www.cve.org

8

AI Score

6.8

Confidence

High

EPSS

0.005

Percentile

76.3%

Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.15, 3.0.x before 3.0.17, and 3.1.x before 3.1.11 allows remote attackers to inject arbitrary web script or HTML via an e-mail message body with whitespace before a javascript: URL in the SRC attribute of an element, as demonstrated by an IFRAME element.

References

lists.opensuse.org/opensuse-updates/2013-01/msg00036.html

packetstormsecurity.org/files/117504/OTRS-3.1-Cross-Site-Scripting.html

www.kb.cert.org/vuls/id/603276

www.otrs.com/en/open-source/community-news/security-advisories/security-advisory-2012-03/

www.securityfocus.com/bid/56093

znuny.com/assets/proof_of_concept_cve_2012-4751-znuny.py

znuny.com/en/#%21/advisory/ZSA-2012-03

AI Score

6.8

Confidence

High

EPSS

0.005

Percentile

76.3%

Related for CVELIST:CVE-2012-4751

packetstorm1 nessus5 nvd1 freebsd2 ubuntucve1 openvas3 prion1 debiancve1 cve1 cert1 exploitdb2 osv2 debian2