CVE-2012-3351

Multiple cross-site scripting (XSS) vulnerabilities in LongTail Video JW Player through 5.10.2295 allow remote attackers to inject arbitrary web script or HTML via the (1) link, (2) logo.link, or (3) aboutlink parameter, or a nested URI scheme name for (4) javascript, (5) asfunction, or (6) vbscript.

• CWE-79

• http://developer.longtailvideo.com/trac/ticket/1585Vendor Advisory
• http://technet.microsoft.com/security/msvr/msvr12-009Third Party Advisory
• https://www.exploit-db.com/exploits/37552Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/37672Third Party Advisory, VDB Entry
• https://www.securityfocus.com/bid/54101/discussThird Party Advisory, VDB Entry
• https://www.securityfocus.com/bid/55199/exploitThird Party Advisory, VDB Entry
• http://developer.longtailvideo.com/trac/ticket/1585Vendor Advisory
• http://technet.microsoft.com/security/msvr/msvr12-009Third Party Advisory
• https://www.exploit-db.com/exploits/37552Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/37672Third Party Advisory, VDB Entry
• https://www.securityfocus.com/bid/54101/discussThird Party Advisory, VDB Entry
• https://www.securityfocus.com/bid/55199/exploitThird Party Advisory, VDB Entry

Published

Feb 20, 2020

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-3341IBM InfoSphere Guardium 7.0, 8.0, 8.01, and 8.2 is vulnerabl…5.4
• CVE-2012-3342Unspecified vulnerability in the Java Runtime Environment (J…
• CVE-2012-3343Cross-site request forgery (CSRF) vulnerability in Microdasy…
• CVE-2012-3345ioquake3 before r2253 allows local users to overwrite arbitr…
• CVE-2012-3347AutoFORM PDM Archive before 7.0 implements user accounts in …
• CVE-2012-3350SQL injection vulnerability in index.php in Webmatic 3.1.1 a…
• CVE-2012-3353The Apache Sling JCR ContentLoader 2.1.4 XmlReader used in t…
• CVE-2012-3354doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when…
• CVE-2012-3355(1) AlbumTab.py, (2) ArtistTab.py, (3) LinksTab.py, and (4) …
• CVE-2012-3356The remote SVN views functionality (lib/vclib/svn/svn_ra.py)…
• CVE-2012-3357The SVN revision view (lib/vclib/svn/svn_repos.py) in ViewVC…
• CVE-2012-3358Multiple heap-based buffer overflows in the j2k_read_sot fun…