CVE-2011-5209

GraphicsClone Script - Cross-Site Scripting via Search Term Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2011-5209. PoCs published by Mr.PaPaRoSSe.

AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in GraphicsClone Script, where user-supplied input is not properly sanitized. An attacker can exploit this by injecting arbitrary script code via the 'term' parameter in the search functionality.

Description

Cross-site scripting (XSS) vulnerability in search/ in GraphicsClone Script, possibly 1.11, allows remote attackers to inject arbitrary web script or HTML via the term parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Mr.PaPaRoSSe · textwebappsphp
https://www.exploit-db.com/exploits/36492

The provided text describes a cross-site scripting (XSS) vulnerability in GraphicsClone Script, where user-supplied input is not properly sanitized. An attacker can exploit this by injecting arbitrary script code via the 'term' parameter in the search functionality.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: GraphicsClone Script (version not specified)
No auth needed
Prerequisites: Access to the vulnerable web application
MITRE ATT&CK
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/78107
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/71971
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/47372
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/51258

Scores

EPSS 0.0165
EPSS Percentile 73.7%

Details

CWE
CWE-79
Status published
Products (1)
cloneforest/graphicsclone_script 1.11
Published Oct 09, 2012
Tracked Since Feb 18, 2026