NVD

Id
15491  
Name
CVE-2010-4208  
Description
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to uploader/assets/uploader.swf.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-11-07  
Modified Date
2011-02-05  
Seq
2010-4208  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
87547 15491 CVE-2010-4208 FEDORA-2010-17280  View
87548 15491 CVE-2010-4208 FEDORA-2010-17274  View
87549 15491 CVE-2010-4208 FEDORA-2010-17235  View
87550 15491 CVE-2010-4208 SUSE-SR:2010:021  View
87551 15491 CVE-2010-4208 http://moodle.org/mod/forum/discuss.php?d=160910  View
87552 15491 CVE-2010-4208 http://www.bugzilla.org/security/3.2.8/  View
87553 15491 CVE-2010-4208 [oss-security] 20101107 Re: CVE request: moodle 1.9.10  View
87554 15491 CVE-2010-4208 20101103 Security Advisory for Bugzilla 3.2.8, 3.4.8, 3.6.2, and 3.7.3  View
87555 15491 CVE-2010-4208 44420  View
87556 15491 CVE-2010-4208 1024683  View
87557 15491 CVE-2010-4208 ADV-2010-2878  View
87558 15491 CVE-2010-4208 ADV-2010-2975  View
87559 15491 CVE-2010-4208 http://yuilibrary.com/support/2.8.2/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37592 JVNDB-2010-003377 Bugzilla などの製品で使用される YUI の Flash コンポーネント構造におけるクロスサイトスクリプティングの脆弱性 Bugzilla、Moodle およびその他の製品で使用される YUI の Flash コンポーネント構造は、uploader/assets/uploader.swf に関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-4208 46788 CVE-2010-4208 15491 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003377.html 2010-11-07 2012-03-27 View