NVD

Id
44174  
Name
CVE-2012-2362  
Description
Cross-site scripting (XSS) vulnerability in blog/lib.php in the blog implementation in Moodle 1.9.x before 1.9.18, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via a crafted parameter to blog/index.php.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-07-20  
Modified Date
2012-11-06  
Seq
2012-2362  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
221853 44174 CVE-2012-2362 http://git.moodle.org/gw?p=moodle.git;a=commit;h=038131c8b5614f18c14d964dc53b6960ae6c30d8  View
221854 44174 CVE-2012-2362 [oss-security] 20120523 Moodle security notifications public  View
221855 44174 CVE-2012-2362 https://moodle.org/mod/forum/discuss.php?d=203052  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27551 JVNDB-2012-003258 Moodle のブログの実装におけるクロスサイトスクリプティングの脆弱性 Moodle にブログを実装する blog/lib.php には、Internet Explorer が使用されている場合、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-2362 55600 CVE-2012-2362 44174 2.6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003258.html 2012-07-21 2012-11-16 View