NVD

Id
43326  
Name
CVE-2012-1410  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the History Window implementation in Kadu 0.9.0 through 0.11.0 allow remote attackers to inject arbitrary web script or HTML via a crafted (1) SMS message, (2) presence message, or (3) status description.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-02-29  
Modified Date
2012-02-29  
Seq
2012-1410  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
217846 43326 CVE-2012-1410 [oss-security] 20120227 Re: Re: CVE Status Clarification / Request -- kadu: Stored XSS by parsing contact"s status and sms messages in history  View
217847 43326 CVE-2012-1410 [oss-security] 20120227 CVE Status Clarification / Request -- kadu: Stored XSS by parsing contact"s status and sms messages in history  View
217848 43326 CVE-2012-1410 https://bugzilla.novell.com/show_bug.cgi?id=749036  View
217849 43326 CVE-2012-1410 https://bugzilla.redhat.com/show_bug.cgi?id=797777  View
217850 43326 CVE-2012-1410 https://gitorious.org/kadu/kadu/commit/91772e46541e22cbc2c7bf41a1a9798c2a58f6d6  View
217851 43326 CVE-2012-1410 https://gitorious.org/kadu/kadu/commit/94e7479617d78a1649a0763960edade7ad09a0d0  View
217852 43326 CVE-2012-1410 https://gitorious.org/kadu/kadu/commit/e9506be6d3dcdd408fdf83d8eb82416c9b798c84  View
217853 43326 CVE-2012-1410 https://gitorious.org/kadu/kadu/commit/ebe3674cf0f3aa9b36308c06e19cb293cc790b52  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25886 JVNDB-2012-001593 Kadu の History Window の実装におけるクロスサイトスクリプティングの脆弱性 Kadu の History Window の実装には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-1410 54648 CVE-2012-1410 43326 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001593.html 2012-02-29 2012-03-01 View