CVE

Id
58115  
CVE No.
CVE-2012-4872  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Tickets/Submit in Kayako Fusion before 4.40.985 allows remote attackers to inject arbitrary web script or HTML via certain vectors, possibly a crafted ticket description.  
Phase
Assigned (20120906)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
597200 58115 CVE-2012-4872 MISC:http://st2tea.blogspot.com/2012/03/kayako-fusion-cross-site-scripting.html  View
597201 58115 CVE-2012-4872 MISC:http://wiki.kayako.com/display/DOCS/4.40.985  View
597202 58115 CVE-2012-4872 MISC:http://wiki.kayako.com/display/DOCS/4.40.986  View
597203 58115 CVE-2012-4872 BID:52625  View
597204 58115 CVE-2012-4872 URL:http://www.securityfocus.com/bid/52625  View
597205 58115 CVE-2012-4872 SECUNIA:48462  View
597206 58115 CVE-2012-4872 URL:http://secunia.com/advisories/48462  View
597207 58115 CVE-2012-4872 XF:kayakofusion-submitticket-xss(74143)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
28482 JVNDB-2012-004189 FlatnuX CMS の controlcenter.php におけるクロスサイトスクリプティングの脆弱性 FlatnuX CMS の controlcenter.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-4877 58115 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004189.html  View