CVE-2012-1303

MEDIUM 4.3CVE-2012-1303 · Published 28/12/2014 · updated 16/06/2026

In short

CVE-2012-1303 is a MEDIUM (CVSS 4.3) vulnerability affecting flash (amcharts).
Chance of exploitation in the next 30 days (EPSS): 0.97%, higher than 61.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
flash amcharts	`= 1.0`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in amCharts Flash 1 allow remote attackers to inject arbitrary web script or HTML via the (1) data_file or (2) settings_file parameter to ampie.swf; the message element in the chart_data parameter to (3) amcolumn.swf, (4) amline.swf, (5) amradar.swf, or (6) amxy.sw; or (7) the settings_file parameter to amstock.swf.

References

web.appsec.ws/FlashExploitDatabase.php · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free