NVD

Id
46138  
Name
CVE-2012-4870  
Description
Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) context parameter to panel/index_amp.php or (2) panel/dhtml/index.php; (3) clid or (4) clidname parameters to panel/flash/mypage.php; (5) PATH_INFO to admin/views/freepbx_reload.php; or (6) login parameter to recordings/index.php.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-09-06  
Modified Date
2012-09-17  
Seq
2012-4870  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
231501 46138 CVE-2012-4870 http://packetstormsecurity.org/files/111028/FreePBX-2.10.0-Remote-Command-Execution-XSS.html  View
231502 46138 CVE-2012-4870 20120320 FreePBX remote command execution, xss  View
231503 46138 CVE-2012-4870 18649  View
231504 46138 CVE-2012-4870 http://www.freepbx.org/trac/ticket/5711  View
231505 46138 CVE-2012-4870 52630  View
231506 46138 CVE-2012-4870 freepbx-multiple-xss(74173)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28458 JVNDB-2012-004165 FreePBX におけるクロスサイトスクリプティングの脆弱性 FreePBX には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-4870 58108 CVE-2012-4870 46138 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004165.html 2012-03-23 2012-09-11 View