PT-2012-5299 · Unknown · Bad Behavior

Error · Publicado 2012-08-13 · Atualizado 2017-08-29 · CVE-2012-4271

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Bad Behavior plugin versions prior to 2.0.47 Bad Behavior plugin versions 2.2.x prior to 2.2.5

Description The issue allows remote attackers to inject arbitrary web script or HTML via certain parameters, including PATH INFO, httpbl key, httpbl maxage, httpbl threat, reverse proxy addresses, or reverse proxy header.

Recommendations For Bad Behavior plugin versions prior to 2.0.47, update to version 2.0.47 or later. For Bad Behavior plugin versions 2.2.x prior to 2.2.5, update to version 2.2.5 or later.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2012-4271

Produtos afetados

Bad Behavior

Referências · 6

• 🔥 http://plugins.trac.wordpress.org/changeset?old_path=%2Fbad-behavior&old=543807&new_path=%2Fbad-behavior&new=543807 · Exploit
• http://packetstormsecurity.org/files/112619/WordPress-Bad-Behavior-Cross-Site-Scripting.html · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4271 · Nota
• http://securityfocus.com/bid/53477 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-4271 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75521 · Nota