CVE-2012-4015
Severity Score
4.3
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Cross-site scripting (XSS) vulnerability in the management screen in myLittleTools myLittleAdmin for SQL Server 2000 allows remote attackers to inject arbitrary web script or HTML via vectors that trigger a crafted database entry.
Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en la pantalla de gestión de myLittleTools myLittleAdmin para SQL Server 2000, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores que disparan una entrada manipulada en la base de datos.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2012-07-12 CVE Reserved
- 2012-09-25 CVE Published
- 2024-09-17 CVE Updated
- 2024-09-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| http://jvn.jp/en/jp/JVN56373673/index.html | Third Party Advisory | |
| http://jvndb.jvn.jp/jvndb/JVNDB-2012-000087 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 1.2.a Search vendor "Mylittletools" for product "Mylittleadmin" and version "1.2.a" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | - |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 1.2.a Search vendor "Mylittletools" for product "Mylittleadmin" and version "1.2.a" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | gold |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 1.2.a Search vendor "Mylittletools" for product "Mylittleadmin" and version "1.2.a" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp1 |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 1.2.a Search vendor "Mylittletools" for product "Mylittleadmin" and version "1.2.a" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp2 |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 1.2.a Search vendor "Mylittletools" for product "Mylittleadmin" and version "1.2.a" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp3 |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 1.2.a Search vendor "Mylittletools" for product "Mylittleadmin" and version "1.2.a" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp3a |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 1.2.a Search vendor "Mylittletools" for product "Mylittleadmin" and version "1.2.a" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp4 |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 1.2.b Search vendor "Mylittletools" for product "Mylittleadmin" and version "1.2.b" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | - |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 1.2.b Search vendor "Mylittletools" for product "Mylittleadmin" and version "1.2.b" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | gold |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 1.2.b Search vendor "Mylittletools" for product "Mylittleadmin" and version "1.2.b" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp1 |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 1.2.b Search vendor "Mylittletools" for product "Mylittleadmin" and version "1.2.b" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp2 |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 1.2.b Search vendor "Mylittletools" for product "Mylittleadmin" and version "1.2.b" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp3 |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 1.2.b Search vendor "Mylittletools" for product "Mylittleadmin" and version "1.2.b" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp3a |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 1.2.b Search vendor "Mylittletools" for product "Mylittleadmin" and version "1.2.b" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp4 |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 1.5.a Search vendor "Mylittletools" for product "Mylittleadmin" and version "1.5.a" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | - |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 1.5.a Search vendor "Mylittletools" for product "Mylittleadmin" and version "1.5.a" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | gold |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 1.5.a Search vendor "Mylittletools" for product "Mylittleadmin" and version "1.5.a" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp1 |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 1.5.a Search vendor "Mylittletools" for product "Mylittleadmin" and version "1.5.a" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp2 |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 1.5.a Search vendor "Mylittletools" for product "Mylittleadmin" and version "1.5.a" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp3 |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 1.5.a Search vendor "Mylittletools" for product "Mylittleadmin" and version "1.5.a" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp3a |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 1.5.a Search vendor "Mylittletools" for product "Mylittleadmin" and version "1.5.a" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp4 |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 2.0 Search vendor "Mylittletools" for product "Mylittleadmin" and version "2.0" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | - |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 2.0 Search vendor "Mylittletools" for product "Mylittleadmin" and version "2.0" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | gold |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 2.0 Search vendor "Mylittletools" for product "Mylittleadmin" and version "2.0" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp1 |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 2.0 Search vendor "Mylittletools" for product "Mylittleadmin" and version "2.0" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp2 |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 2.0 Search vendor "Mylittletools" for product "Mylittleadmin" and version "2.0" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp3 |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 2.0 Search vendor "Mylittletools" for product "Mylittleadmin" and version "2.0" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp3a |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 2.0 Search vendor "Mylittletools" for product "Mylittleadmin" and version "2.0" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp4 |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 2.5 Search vendor "Mylittletools" for product "Mylittleadmin" and version "2.5" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | - |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 2.5 Search vendor "Mylittletools" for product "Mylittleadmin" and version "2.5" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | gold |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 2.5 Search vendor "Mylittletools" for product "Mylittleadmin" and version "2.5" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp1 |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 2.5 Search vendor "Mylittletools" for product "Mylittleadmin" and version "2.5" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp2 |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 2.5 Search vendor "Mylittletools" for product "Mylittleadmin" and version "2.5" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp3 |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 2.5 Search vendor "Mylittletools" for product "Mylittleadmin" and version "2.5" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp3a |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 2.5 Search vendor "Mylittletools" for product "Mylittleadmin" and version "2.5" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp4 |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 2.7 Search vendor "Mylittletools" for product "Mylittleadmin" and version "2.7" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | - |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 2.7 Search vendor "Mylittletools" for product "Mylittleadmin" and version "2.7" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | gold |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 2.7 Search vendor "Mylittletools" for product "Mylittleadmin" and version "2.7" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp1 |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 2.7 Search vendor "Mylittletools" for product "Mylittleadmin" and version "2.7" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp2 |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 2.7 Search vendor "Mylittletools" for product "Mylittleadmin" and version "2.7" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp3 |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 2.7 Search vendor "Mylittletools" for product "Mylittleadmin" and version "2.7" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp3a |
Safe
|
| Mylittletools Search vendor "Mylittletools" | Mylittleadmin Search vendor "Mylittletools" for product "Mylittleadmin" | 2.7 Search vendor "Mylittletools" for product "Mylittleadmin" and version "2.7" | sqlserver2000 |
Affected
| in | Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp4 |
Safe
|