CVE Feed

    Dashboard / CVE / CVE-2012-4037

    CVE-2012-4037

    Multiple cross-site scripting (XSS) vulnerabilities in the web client in Transmission before 2.61 allow remote attackers to inject arbitrary web script or HTML via the (1) comment, (2) created by, or (3) name field in a torrent file.

    Published:Aug 15, 2012
    Last Modified:Apr 11, 2025
    EPS:Aug 15, 2012
    EPSS Score:0.00545
    CVSS Score:2.6

    Affected Products

    Vendor
    Transmissionbt
    Product
    Transmission

    Exploits

    http://archives.neohapsis.com/archives/fulldisclosure/2012-07/0349.htmlhttp://www.madirish.net/541http://archives.neohapsis.com/archives/fulldisclosure/2012-07/0349.htmlhttp://www.madirish.net/541

    Related CVEs

    CVE-2026-38978 (CVSS 5.3) — transmission through 4.1.1 was found to have a clickjacking weakness in the browser-facing WebUI and RPC respo…
    CVE-2018-10756 (CVSS 7.8) — Use-after-free in libtransmission/variant.c in Transmission before 3.00 allows remote attackers to cause a den…
    CVE-2018-5702 (CVSS 8.8) — Transmission through 2.92 relies on X-Transmission-Session-Id (which is not a forbidden header for Fetch) for …
    CVE-2014-4909 (CVSS 6.8) — Integer overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission before 2.84 allo…
    CVE-2012-6129 (CVSS 7.5) — Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other produ…
    CVE-2010-1853 (CVSS 6.8) — Multiple stack-based buffer overflows in the tr_magnetParse function in libtransmission/magnet.c in Transmissi…
    CVE-2010-0749 (CVSS 5.3) — Transmission before 1.92 allows attackers to prevent download of a file by corrupted data during the endgame.…
    CVE-2010-0748 (CVSS 9.8) — Transmission before 1.92 allows an attacker to cause a denial of service (crash) or possibly have other unspec…
    CVE-2010-0012 (CVSS 8.8) — Directory traversal vulnerability in libtransmission/metainfo.c in Transmission 1.22, 1.34, 1.75, and 1.76 all…
    CVE-2009-1757 (CVSS 6.8) — Cross-site request forgery (CSRF) vulnerability in Transmission 1.5 before 1.53 and 1.6 before 1.61 allows rem…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High