packetstormsecurity.org
http://packetstormsecurity.org/files/112462/myCare2x-CMS-Cross-Site-Scripting-SQL-Injection.html CVE-2012-4262
myCare2x CMS - Multiple Vulnerabilities
Record summary
CVE-2012-4262 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Multiple cross-site scripting (XSS) vulnerabilities in myCare2x allow remote attackers to inject arbitrary web script or HTML via the (1) name_last, (2) name_first, (3) name_middle, or (4) name_maiden parameter to modules/patient/mycare_pid.php; (5) favorites or (6) lang parameter to modules/nursing/mycare_ward_print.php; (7) aktion or (8) callurl parameter to modules/patient/mycare2x_pat_info.php; or (9) ln parameter to modules/drg/mycare2x_proc_search.php.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBmyCare2x CMS - Multiple VulnerabilitiesExploitDB exploitby Vulnerability-LabNot analyzed1 file
References
1249029Third-party advisory
http://secunia.com/advisories/49029 18844exploit
http://www.exploit-db.com/exploits/18844 81687vdb entry
http://www.osvdb.org/81687 81688vdb entry
http://www.osvdb.org/81688 81689vdb entry
http://www.osvdb.org/81689 81690vdb entry
http://www.osvdb.org/81690 53392vdb entry
http://www.securityfocus.com/bid/53392 vulnerability-lab.com
http://www.vulnerability-lab.com/get_content.php?id=524 mycar2xcms-mycarepid-xss(75391)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/75391 mycare2x-multiple-xss(75392)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/75392 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2012-4262