CVE-2012-1021

4images 1.7.10 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in admin/categories.php in 4images 1.7.10 allows remote attackers to inject arbitrary web script or HTML via the cat_parent_id parameter in an addcat action.

Exploits (1)

exploitdb WRITEUP VERIFIED

by RandomStorm · textwebappsphp

https://www.exploit-db.com/exploits/36644

View Code ZIP pw:eip

References (5)

[Exploit] http://osvdb.org/78711

[Exploit] http://packetstormsecurity.org/files/109290/4images-xss.txt

[Vendor Advisory] http://secunia.com/advisories/47811

[Exploit] http://www.securityfocus.com/bid/51774

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/72924

Scores

EPSS 0.0369

EPSS Percentile 87.8%

Classification

CWE

CWE-79

Status published

Affected Products (2)

4homepages/4images

n/a/n/a

Timeline

Published Feb 08, 2012

Tracked Since Feb 18, 2026