Search for vulnerabilities
Vulnerability ID | VCID-sbj1-zf8j-aaas |
Aliases |
CVE-2012-4751
|
Summary | Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.15, 3.0.x before 3.0.17, and 3.1.x before 3.1.11 allows remote attackers to inject arbitrary web script or HTML via an e-mail message body with whitespace before a javascript: URL in the SRC attribute of an element, as demonstrated by an IFRAME element. |
Status | Published |
Exploitability | 2.0 |
Weighted Severity | 6.2 |
Risk | 10.0 |
Affected and Fixed Packages | Package Details |
Data source | Exploit-DB |
---|---|
Date added | Aug. 31, 2012 |
Description | OTRS Open Technology Real Services 3.1.8/3.1.9 - Cross-Site Scripting |
Ransomware campaign use | Unknown |
Source publication date | Aug. 31, 2012 |
Exploit type | webapps |
Platform | windows |
Source update date | Aug. 31, 2012 |
Source URL | http://znuny.com/#!/advisory/ZSA-2012-02 |
Exploitability (E) | Access Vector (AV) | Access Complexity (AC) | Authentication (Au) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
---|---|---|---|---|---|---|
high functional unproven proof_of_concept not_defined |
local adjacent_network network |
high medium low |
multiple single none |
none partial complete |
none partial complete |
none partial complete |
Percentile | 0.76654 |
EPSS Score | 0.00493 |
Published At | Nov. 1, 2024, midnight |
Date | Actor | Action | Source | VulnerableCode Version |
---|---|---|---|---|
There are no relevant records. |