CVE-2012-1027

]project-open[ 3.4.x-3.5.0.1-2 - Cross-Site Scripting via Message Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2012-1027. PoCs published by Michail Poultsakis.

AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in project-open, where user-supplied data is not sufficiently sanitized. An attacker can exploit this by injecting arbitrary JavaScript via the 'message' parameter in the URL.

Description

Cross-site scripting (XSS) vulnerability in account-closed.tcl in ]project-open[ (aka ]po[) 3.4.x, 3.5.0.1-2, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the message parameter to register/account-closed.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Michail Poultsakis · textwebappsphp
https://www.exploit-db.com/exploits/36660

The provided text describes a cross-site scripting (XSS) vulnerability in project-open, where user-supplied data is not sufficiently sanitized. An attacker can exploit this by injecting arbitrary JavaScript via the 'message' parameter in the URL.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: project-open (version not specified)
No auth needed
Prerequisites: Access to the target URL
MITRE ATT&CK
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/78823
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/51842
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/47854
Exploit, US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/732115
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/72952

Scores

EPSS 0.0241
EPSS Percentile 82.1%

Details

CWE
CWE-79
Status published
Products (2)
project-open/\]project-open\[ 3.4.0
project-open/\]project-open\[ 3.5.0.1-2
Published Feb 08, 2012
Tracked Since Feb 18, 2026