PT-2012-5028 · Decoda · Decoda

Publicado 2012-07-03 · Atualizado 2012-07-17 · CVE-2012-3832

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Decoda versions prior to 3.2

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via vectors related to (1) b or (2) div tags. This issue is related to the decoda/Decoda.php file in Decoda.

Recommendations For versions prior to 3.2, update to version 3.2 or later to resolve the issue.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2012-3832

Produtos afetados

Decoda

Referências · 2

• 🔥❌ https://github.com/milesj/php-decoda/commit/6f2b9fb48bc110edeab17459038feb2627d52320 · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2012-3832 · Nota de Segurança