NVD

Id
42388  
Name
CVE-2012-0253  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Demand Media Pluck SiteLife before 5.0.13 allow remote attackers to inject arbitrary web script or HTML via (1) the jsonRequest parameter to Direct/Process, the (2) r or (3) cb parameter to Direct/jsonp.htm, or (4) the cb parameter to sys/jsonp.app/.htm.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-04-18  
Modified Date
2013-02-14  
Seq
2012-0253  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
213780 42388 CVE-2012-0253 VU#400619  View
213781 42388 CVE-2012-0253 http://www.kb.cert.org/vuls/id/MAPG-8Q6JEG  View
213782 42388 CVE-2012-0253 52968  View
213783 42388 CVE-2012-0253 plucksitelife-multiple-xss(74805)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26337 JVNDB-2012-002044 Pluck SiteLife にクロスサイトスクリプティングの脆弱性 Pluck SiteLife には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-0253 53491 CVE-2012-0253 42388 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002044.html 2012-04-11 2012-04-20 View