CVE

Id
57595  
CVE No.
CVE-2012-4352  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Stoneware webNetwork 6.1 before SP1 allow remote attackers to inject arbitrary web script or HTML via the blogName parameter to (1) community/blog.jsp or (2) community/blogSearch.jsp, the (3) calendarType or (4) monthNumber parameter to community/calendar.jsp, or the (5) flag parameter to swDashboard/ajax/setAppFlag.jsp.  
Phase
Assigned (20120817)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
594154 57595 CVE-2012-4352 MISC:http://infosec42.blogspot.com/2012/10/stoneware-webnetwork-61-reflective-xss.html  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
28042 JVNDB-2012-003749 Sielco Sistemi Winlog Pro SCADA および Winlog Lite SCADA における任意のコードを実行される脆弱性 Sielco Sistemi Winlog Pro SCADA および Winlog Lite SCADA には、配列のインデックスエラーにより、任意のコードを実行される脆弱性が存在します。 CVE-2012-4357 57595 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003749.html  View