Lucene search

K
nvd[email protected]NVD:CVE-2012-3831
HistoryJul 03, 2012 - 10:55 p.m.

CVE-2012-3831

2012-07-0322:55:02
CWE-79
web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.0%

Cross-site scripting (XSS) vulnerability in decoda/templates/video.php in Decoda before 3.3.1 allows remote attackers to inject arbitrary web script or HTML via multiple URLs in an img tag.

Affected configurations

NVD
Node
milesjdecodaRange3.3
OR
milesjdecodaMatch2.2
OR
milesjdecodaMatch2.3
OR
milesjdecodaMatch2.4
OR
milesjdecodaMatch2.5
OR
milesjdecodaMatch2.6
OR
milesjdecodaMatch2.7
OR
milesjdecodaMatch2.8
OR
milesjdecodaMatch2.9
OR
milesjdecodaMatch3.0
OR
milesjdecodaMatch3.1
OR
milesjdecodaMatch3.2

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.0%

Related for NVD:CVE-2012-3831