CVE-2012-4667 in SquidClamav
Summary
Multiple cross-site scripting (XSS) vulnerabilities in SquidClamav 5.x before 5.8 allow remote attackers to inject arbitrary web script or HTML via the (1) url, (2) virus, (3) source, or (4) user parameter to (a) clwarn.cgi, (b) clwarn.cgi.de_DE, (c) clwarn.cgi.en_EN, (d) clwarn.cgi.fr_FR, (e) clwarn.cgi.pt_BR, or (f) clwarn.cgi.ru_RU in cgi-bin/.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
08/24/2012
Disclosure
08/25/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 61799 | Darold SquidClamav clwarn.cgi cross site scripting | 79 | Not defined | Official fix | CVE-2012-4667 |