Exploitation Summary
EIP tracks 1 public exploit for CVE-2012-1782. PoCs published by Ucha Gobejishvili.
AI-analyzed exploit summary This exploit demonstrates an XSS vulnerability in OSQA's CMS by injecting malicious HTML/JavaScript code into the URL or picture bar of the 'ask' page. The lack of proper sanitization allows arbitrary script execution in the context of the affected site.
Description
Multiple cross-site scripting (XSS) vulnerabilities in questions/ask in OSQA 3b allow remote attackers to inject arbitrary web script or HTML via the (1) url bar or (2) picture bar.
Exploits (1)
This exploit demonstrates an XSS vulnerability in OSQA's CMS by injecting malicious HTML/JavaScript code into the URL or picture bar of the 'ask' page. The lack of proper sanitization allows arbitrary script execution in the context of the affected site.