CVE

Id
58134  
CVE No.
CVE-2012-4891  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in fw/index2.do in ManageEngine Firewall Analyzer 7.2 allows remote attackers to inject arbitrary web script or HTML via the url parameter, a different vector than CVE-2012-4889. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  
Phase
Assigned (20120910)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
597307 58134 CVE-2012-4891 EXPLOIT-DB:35933  View
597308 58134 CVE-2012-4891 URL:http://www.exploit-db.com/exploits/35933  View
597309 58134 CVE-2012-4891 MISC:http://packetstormsecurity.com/files/130169/ManageEngine-Firewall-Analyzer-8.0-Directory-Traversal-XSS.html  View
597310 58134 CVE-2012-4891 OSVDB:80874  View
597311 58134 CVE-2012-4891 URL:http://osvdb.org/80874  View
597312 58134 CVE-2012-4891 SECUNIA:48657  View
597313 58134 CVE-2012-4891 URL:http://secunia.com/advisories/48657  View
597314 58134 CVE-2012-4891 XF:manageengine-firewallanalyzer-xss(100551)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
29066 JVNDB-2012-004773 SumatraPDF におけるヒープベースのバッファオーバーフローの脆弱性 SumatraPDF には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2012-4896 58134 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004773.html  View