CVE-2012-4015

EUVD-2012-3959
Cross-site scripting (XSS) vulnerability in the management screen in myLittleTools myLittleAdmin for SQL Server 2000 allows remote attackers to inject arbitrary web script or HTML via vectors that trigger a crafted database entry.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 44%
Affected Products (NVD)
VendorProductVersion
mylittletoolsmylittleadmin
1.2.a:a
mylittletoolsmylittleadmin
1.2.b:b
mylittletoolsmylittleadmin
1.5.a:a
mylittletoolsmylittleadmin
2.0
mylittletoolsmylittleadmin
2.5
mylittletoolsmylittleadmin
2.7
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://jvn.jp/en/jp/JVN56373673/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000087
http://jvn.jp/en/jp/JVN56373673/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000087