CVE-2012-4336
published 2012-09-15CVE-2012-4336: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flogr 2.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via…
PriorityP419medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EXPLOIT
EPSS
1.63%
73.3th percentile
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flogr 2.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO or (2) an arbitrary parameter.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mike_carr | flogr | <= 2.5.6 | — |
| mike_carr | flogr | — | — |
| mike_carr | flogr | — | — |
| mike_carr | flogr | — | — |
| mike_carr | flogr | — | — |
| mike_carr | flogr | — | — |
| mike_carr | flogr | — | — |
| mike_carr | flogr | — | — |
| mike_carr | flogr | — | — |
| mike_carr | flogr | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://archives.neohapsis.com/archives/bugtraq/2012-09/0021.htmlhttp://www.securityfocus.com/bid/55418https://exchange.xforce.ibmcloud.com/vulnerabilities/78310https://exchange.xforce.ibmcloud.com/vulnerabilities/78311https://www.htbridge.com/advisory/HTB23110http://archives.neohapsis.com/archives/bugtraq/2012-09/0021.htmlhttp://www.securityfocus.com/bid/55418https://exchange.xforce.ibmcloud.com/vulnerabilities/78310https://exchange.xforce.ibmcloud.com/vulnerabilities/78311https://www.htbridge.com/advisory/HTB23110
2012-09-15
Published