CVE-2012-1302

MEDIUM · 4.3 CVSS Gepubliceerd: 28-12-2014 CWE-79

Beschrijving

Multiple cross-site scripting (XSS) vulnerabilities in amMap 2.6.3 allow remote attackers to inject arbitrary web script or HTML via the (1) data_file or (2) settings_file parameter to ammap.swf, or (3) the data_file parameter to amtimeline.swf.

Vendors

Ammap Project

Affected products

Ammap

References

web.appsec.ws
www.securitytracker.com
success.trendmicro.com