CVE-2012-1224

Contentlion Alpha - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in system/classes/login.php in ContentLion Alpha 1.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Stefan Schurtz · textwebappsphp

https://www.exploit-db.com/exploits/36870

View Code ZIP pw:eip

References (2)

[Exploit] http://www.darksecurity.de/advisories/2012/SSCHADV2012-004.txt

[Third Party Advisory, VDB Entry] http://osvdb.org/78833

Scores

EPSS 0.0081

EPSS Percentile 74.0%

Classification

CWE

CWE-79

Status published

Affected Products (2)

contentlion/contentlion_alpha

n/a/n/a

Timeline

Published Feb 21, 2012

Tracked Since Feb 18, 2026