NVD

Id
44210  
Name
CVE-2012-2399  
Description
Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFupload 2.2.0.1 and earlier, as used in WordPress before 3.5.2, TinyMCE Image Manager 1.1 and earlier, and other products allows remote attackers to inject arbitrary web script or HTML via the buttonText parameter, a different vulnerability than CVE-2012-3414.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-04-21  
Modified Date
2013-07-19  
Seq
2012-2399  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
222065 44210 CVE-2012-2399 http://core.trac.wordpress.org/browser/branches/3.3/wp-includes/js/swfupload/swfupload.swf?rev=20503  View
222066 44210 CVE-2012-2399 http://make.wordpress.org/core/2013/06/21/secure-swfupload/  View
222067 44210 CVE-2012-2399 http://packetstormsecurity.com/files/120746/SWFUpload-Content-Spoofing-Cross-Site-Scripting.html  View
222068 44210 CVE-2012-2399 http://packetstormsecurity.com/files/122399/tinymce11-xss.txt  View
222069 44210 CVE-2012-2399 20130310 CS and XSS vulnerabilities in SWFUpload  View
222070 44210 CVE-2012-2399 http://wordpress.org/news/2012/04/wordpress-3-3-2/  View
222071 44210 CVE-2012-2399 DSA-2470  View
222072 44210 CVE-2012-2399 [oss-security] 20130718 Re: Re: SWFUpload <= (Object Injection/CSRF) Vulnerabilities Multiple flaws  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26403 JVNDB-2012-002110 WordPress におけるクロスサイトスクリプティングの脆弱性 WordPress には、SWFUpload ライブラリの問題に起因するクロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-2399 55637 CVE-2012-2399 44210 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002110.html 2012-04-21 2013-07-26 View