CVE-2012-1217

Simhl Sths V2 Web Portal - XSS

Title source: rule

Description

Multiple cross-site scripting (XSS) vulnerabilities in STHS v2 Web Portal 2.2 allow remote attackers to inject arbitrary web script or HTML via the team parameter to (1) prospects.php, (2) prospect.php, or (3) team.php.

Exploits (3)

exploitdb WRITEUP VERIFIED
by Liyan Oz · textwebappsphp
https://www.exploit-db.com/exploits/36770
exploitdb WRITEUP VERIFIED
by Liyan Oz · textwebappsphp
https://www.exploit-db.com/exploits/36769
exploitdb WRITEUP VERIFIED
by Liyan Oz · textwebappsphp
https://www.exploit-db.com/exploits/36771

Scores

EPSS 0.0041
EPSS Percentile 61.0%

Classification

CWE
CWE-79
Status published

Affected Products (2)

simhl/sths_v2_web_portal
n/a/n/a

Timeline

Published Feb 21, 2012
Tracked Since Feb 18, 2026