cbcvebase.
CVE-2012-6132
published 2014-04-10

CVE-2012-6132: Cross-site scripting (XSS) vulnerability in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the otk parameter.

PriorityP418medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
1.82%
76.1th percentile
Cross-site scripting (XSS) vulnerability in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the otk parameter.

Affected

21 ranges
VendorProductVersion rangeFixed in
roundup-trackerroundup<= 1.4.19—
roundup-trackerroundup——
roundup-trackerroundup——
roundup-trackerroundup——
roundup-trackerroundup——
roundup-trackerroundup——
roundup-trackerroundup——
roundup-trackerroundup——
roundup-trackerroundup——
roundup-trackerroundup——
roundup-trackerroundup——
roundup-trackerroundup——
roundup-trackerroundup——
roundup-trackerroundup——
roundup-trackerroundup——
roundup-trackerroundup——
roundup-trackerroundup——
roundup-trackerroundup——
roundup-trackerroundup——
roundup-trackerroundup——
roundup-trackerroundup>= 0 < 1.4.201.4.20
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.