Lucene search
FreeBSD0D3547AB-9B69-11E1-BDB1-525401003090HistoryMay 09, 2012 - 12:00 a.m.
PivotX -- 'ajaxhelper.php' Cross Site Scripting Vulnerability
2012-05-0900:00:00
vuxml.freebsd.org
17
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
69.3%
High-Tech Bridge reports:
Input passed via the “file” GET parameter to
/pivotx/ajaxhelper.php is not properly sanitised before
being returned to the user. This can be exploited to
execute arbitrary HTML and script code in administrator’s
browser session in context of the affected website.
References
Related
prion
prion
Cross site scripting
2012-08-13 23:55:00
openvas
openvas
FreeBSD Ports: pivotx
2012-05-31 00:00:00
FreeBSD Ports: pivotx
2012-05-31 00:00:00
htbridge
htbridge
Cross-Site Scripting (XSS) in Pivotx
2012-04-18 00:00:00
cve
cve
CVE-2012-2274
2012-08-13 23:55:00
nessus
nessus
securityvulns
securityvulns
Cross-Site Scripting (XSS) in Pivotx
2012-05-10 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
69.3%
Related for 0D3547AB-9B69-11E1-BDB1-525401003090