CVE-2012-4667 in SquidClamav

Resumen (Inglés)

Multiple cross-site scripting (XSS) vulnerabilities in SquidClamav 5.x before 5.8 allow remote attackers to inject arbitrary web script or HTML via the (1) url, (2) virus, (3) source, or (4) user parameter to (a) clwarn.cgi, (b) clwarn.cgi.de_DE, (c) clwarn.cgi.en_EN, (d) clwarn.cgi.fr_FR, (e) clwarn.cgi.pt_BR, or (f) clwarn.cgi.ru_RU in cgi-bin/.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservar

2012-08-24

Divulgación

2012-08-25

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
61799	Darold SquidClamav clwarn.cgi secuencias de comandos en sitios cruzados	79	No está definido	Arreglo oficial	CVE-2012-4667

Fuentes

• MITRE
• NVD
• CVE Details