packetstormsecurity.org
http://packetstormsecurity.org/files/view/108719/annuaire-xss.txt CVE-2012-0899
Annuaire PHP - 'sites_inscription.php' Multiple Cross-Site Scripting Vulnerabilities
Record summary
CVE-2012-0899 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Cross-site scripting (XSS) vulnerability in referencement/sites_inscription.php in Annuaire PHP allows remote attackers to inject arbitrary web script or HTML via the url parameter and possibly the nom parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBAnnuaire PHP - 'sites_inscription.php' Multiple Cross-Site Scripting VulnerabilitiesExploitDB exploitby Atmon3rNot analyzed1 file
References
451434vdb entry
http://www.securityfocus.com/bid/51434 annuaire-sitesinscription-xss(72407)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/72407 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2012-0899