CVE-2012-1217
STHS v2 Web Portal 2.2 - Cross-Site Scripting via Team Parameter
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2012-1217. PoCs published by Liyan Oz.
AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in STHS v2 Web Portal 2.2, where the 'team' parameter in 'team.php' is vulnerable due to insufficient input sanitization. The exploit details are conceptual, lacking actual PoC code or payloads.
Description
Multiple cross-site scripting (XSS) vulnerabilities in STHS v2 Web Portal 2.2 allow remote attackers to inject arbitrary web script or HTML via the team parameter to (1) prospects.php, (2) prospect.php, or (3) team.php.
Exploits (3)
The provided text describes a SQL injection vulnerability in STHS v2 Web Portal 2.2, where the 'team' parameter in 'team.php' is vulnerable due to insufficient input sanitization. The exploit details are conceptual, lacking actual PoC code or payloads.
The provided text describes a SQL injection vulnerability in STHS v2 Web Portal 2.2, where the 'team' parameter in 'prospects.php' is not properly sanitized. It includes a basic example of an exploitable URL but lacks executable exploit code.
The provided text describes a SQL injection vulnerability in STHS v2 Web Portal 2.2, where the 'team' parameter in 'prospect.php' is vulnerable due to insufficient input sanitization. It includes a basic example URL but lacks actual exploit code or payload details.