CVE-2012-4751

Related Files

Mandriva Linux Security Advisory 2013-112

Posted Apr 11, 2013

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2013-112 - Multiple cross-site scripting vulnerabilities in Open Ticket Request System Help Desk 2.4.x before 2.4.13, 3.0.x before 3.0.15, and 3.1.x before 3.1.9, and OTRS ITSM 2.1.x before 2.1.5, 3.0.x before 3.0.6, and 3.1.x before 3.1.6, allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with expression property in the STYLE attribute of an arbitrary element or UTF-7 text in an HTTP-EQUIV=CONTENT-TYPE META element. Cross-site scripting vulnerability in Open Ticket Request System Help Desk 2.4.x before 2.4.14, 3.0.x before 3.0.16, and 3.1.x before 3.1.10, when Firefox or Opera is used, allows remote attackers to inject arbitrary web script or HTML via an e-mail message body with nested HTML tags. Cross-site scripting vulnerability in Open Ticket Request System Help Desk 2.4.x before 2.4.15, 3.0.x before 3.0.17, and 3.1.x before 3.1.11 allows remote attackers to inject arbitrary web script or URL in the SRC attribute of an element, as demonstrated by an IFRAME element.

tags | advisory, remote, web, arbitrary, vulnerability, xss

systems | linux, mandriva

advisories | CVE-2012-2582, CVE-2012-4600, CVE-2012-4751

SHA-256 | ef99ff1195e6fef97371a1c9efaee80a50ab7b45cb1d0b8ea55436dc8f49df6d

Download | Favorite | View

OTRS 3.1 Cross Site Scripting

Posted Oct 18, 2012

Authored by Mike Eduard

OTRS version 3.1 suffers from a stored cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2012-4751

SHA-256 | 90cc7b3448335eda36a48606a4d71aca4b926d5b562d231783f18d701119c009

Download | Favorite | View