CVE-2012-1188
Fork CMS < 3.2.7 - Cross-Site Scripting via Type, Querystring, or Name Parameters
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-1188. PoCs published by anonymous.
AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in Fork CMS versions prior to 3.2.7. It includes a proof-of-concept URL demonstrating the XSS payload but does not contain executable exploit code.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) type or (2) querystring parameters to private/en/error or (3) name parameter to private/en/locale/index.
Exploits (2)
The provided text describes a cross-site scripting (XSS) vulnerability in Fork CMS versions prior to 3.2.7. It includes a proof-of-concept URL demonstrating the XSS payload but does not contain executable exploit code.
This exploit demonstrates XSS vulnerabilities in Fork CMS by injecting arbitrary JavaScript via the 'type' and 'querystring' parameters in the error page URL. The PoC uses script tags to execute an alert with document.cookie, confirming the vulnerability.