Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-1262
HistoryMar 03, 2012 - 12:00 a.m.

CVE-2012-1262

2012-03-0300:00:00
ubuntu.com
ubuntu.com
8

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

76.5%

Cross-site scripting (XSS) vulnerability in cgi-bin/mt/mt-wizard.cgi in
Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13, when the
product is incompletely installed, allows remote attackers to inject
arbitrary web script or HTML via the dbuser parameter, a different
vulnerability than CVE-2012-0318.

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

76.5%