CVE

Id
58116  
CVE No.
CVE-2012-4873  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the file_download function in GNUBoard before 4.34.21 allows remote attackers to inject arbitrary web script or HTML via the filename parameter.  
Phase
Assigned (20120906)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
597208 58116 CVE-2012-4873 EXPLOIT-DB:18627  View
597209 58116 CVE-2012-4873 URL:http://www.exploit-db.com/exploits/18627  View
597210 58116 CVE-2012-4873 CONFIRM:http://sir.co.kr/bbs/board.php?bo_table=g4_pds&wr_id=7156  View
597211 58116 CVE-2012-4873 BID:52622  View
597212 58116 CVE-2012-4873 URL:http://www.securityfocus.com/bid/52622  View
597213 58116 CVE-2012-4873 SECUNIA:48458  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
28483 JVNDB-2012-004190 FlatnuX CMS の controlcenter.php における絶対パストラバーサルの脆弱性 FlatnuX CMS の controlcenter.php には、絶対パストラバーサルの脆弱性が存在します。 CVE-2012-4878 58116 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004190.html  View