Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-2362
HistoryJul 21, 2012 - 12:00 a.m.

CVE-2012-2362

2012-07-2100:00:00
ubuntu.com
ubuntu.com
10

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

EPSS

0.002

Percentile

60.3%

Cross-site scripting (XSS) vulnerability in blog/lib.php in the blog
implementation in Moodle 1.9.x before 1.9.18, when Internet Explorer is
used, allows remote attackers to inject arbitrary web script or HTML via a
crafted parameter to blog/index.php.

Notes

Author Note
jdstrand moodle 1.9

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

EPSS

0.002

Percentile

60.3%