← Back

CVE-2012-4015

nvd nist
Published: Sep 25, 2012Modified: Apr 29, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:N/I:P/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the management screen in myLittleTools myLittleAdmin for SQL Server 2000 allows remote attackers to inject arbitrary web script or HTML via vectors that trigger a crafted database entry.

Affected (6)

Mylittletools
1 product
Mylittleadmin
Configuration A
6 vulnerable · 7 platform
Vulnerable SoftwareAffected Versions
Mylittletools
Mylittleadmin
Version 1.2.a
Mylittleadmin
Version 1.2.b
Mylittleadmin
Version 1.5.a
Mylittleadmin
Version 2.0
Mylittleadmin
Version 2.5
Mylittleadmin
Version 2.7
Running on/withPlatform Versions
Microsoft
Sql Server
Version 2000
Microsoft
Sql Server
Version 2000 gold
Microsoft
Sql Server
Version 2000 sp1
Microsoft
Sql Server
Version 2000 sp2
Microsoft
Sql Server
Version 2000 sp3
Microsoft
Sql Server
Version 2000 sp3a
Microsoft
Sql Server
Version 2000 sp4

Related CWEs

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (4)

Source: vultures@jpcert.or.jp
Source: vultures@jpcert.or.jp
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.