CVEvulnerability
CVE-2012-4037
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2012-08-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in the web client in Transmission before 2.61 allow remote attackers to inject arbitrary web script or HTML via the (1) comment, (2) created by, or (3) name field in a torrent file.
Affected configurations
• transmissionbt transmission (<= 2.60)
• transmissionbt transmission 0.1
• transmissionbt transmission 0.2
• transmissionbt transmission 0.3
• transmissionbt transmission 0.4
• transmissionbt transmission 0.5
• transmissionbt transmission 0.6
• transmissionbt transmission 0.6.1
• transmissionbt transmission 0.70
• transmissionbt transmission 0.71
• transmissionbt transmission 0.72
• transmissionbt transmission 0.80
• transmissionbt transmission 0.81
• transmissionbt transmission 0.82
• transmissionbt transmission 0.90
• transmissionbt transmission 0.91
• transmissionbt transmission 0.92
• transmissionbt transmission 0.93
• transmissionbt transmission 0.94
• transmissionbt transmission 0.95
• transmissionbt transmission 0.96
• transmissionbt transmission 1.00
• transmissionbt transmission 1.01
• transmissionbt transmission 1.02
• transmissionbt transmission 1.2
• transmissionbt transmission 1.03
• transmissionbt transmission 1.04
• transmissionbt transmission 1.05
• transmissionbt transmission 1.06
• transmissionbt transmission 1.10
• transmissionbt transmission 1.11
• transmissionbt transmission 1.20
• transmissionbt transmission 1.21
• transmissionbt transmission 1.22
• transmissionbt transmission 1.30
• transmissionbt transmission 1.31
• transmissionbt transmission 1.32
• transmissionbt transmission 1.33
• transmissionbt transmission 1.34
• transmissionbt transmission 1.40
• transmissionbt transmission 1.41
• transmissionbt transmission 1.42
• transmissionbt transmission 1.50
• transmissionbt transmission 1.51
• transmissionbt transmission 1.52
• transmissionbt transmission 1.53
• transmissionbt transmission 1.54
• transmissionbt transmission 1.60
• transmissionbt transmission 1.61
• transmissionbt transmission 1.70
• transmissionbt transmission 1.71
• transmissionbt transmission 1.72
• transmissionbt transmission 1.73
• transmissionbt transmission 1.74
• transmissionbt transmission 1.75
• transmissionbt transmission 1.76
• transmissionbt transmission 1.77
• transmissionbt transmission 1.80
• transmissionbt transmission 1.81
• transmissionbt transmission 1.82
… and 27 more
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://archives.neohapsis.com/archives/fulldisclosure/2012-07/0349.html Exploit
- http://secunia.com/advisories/50027 Vendor Advisory
- http://secunia.com/advisories/50769 secunia.com
- http://www.madirish.net/541 Exploit
- http://www.securityfocus.com/bid/54705 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1584-1 www.ubuntu.com
- https://trac.transmissionbt.com/ticket/4979 Patch
- https://trac.transmissionbt.com/wiki/Changes#version-2.61 trac.transmissionbt.com
- http://archives.neohapsis.com/archives/fulldisclosure/2012-07/0349.html Exploit
- http://secunia.com/advisories/50027 Vendor Advisory
- http://secunia.com/advisories/50769 secunia.com
- http://www.madirish.net/541 Exploit
- http://www.securityfocus.com/bid/54705 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1584-1 www.ubuntu.com
- https://trac.transmissionbt.com/ticket/4979 Patch
- https://trac.transmissionbt.com/wiki/Changes#version-2.61 trac.transmissionbt.com