Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-1262
HistoryMar 03, 2012 - 12:00 a.m.

CVE-2012-1262

2012-03-0300:00:00
ubuntu.com
ubuntu.com
8

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.005

Percentile

76.4%

Cross-site scripting (XSS) vulnerability in cgi-bin/mt/mt-wizard.cgi in
Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13, when the
product is incompletely installed, allows remote attackers to inject
arbitrary web script or HTML via the dbuser parameter, a different
vulnerability than CVE-2012-0318.

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.005

Percentile

76.4%