hauntit.blogspot.com
http://hauntit.blogspot.com/2012/03/en-gpeasy-233-html-injection-xss.html CVE-2012-6513
gpEasy 2.3.3 - 'jsoncallback' Cross-Site Scripting
Record summary
CVE-2012-6513 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Cross-site scripting (XSS) vulnerability in index.php/Admin_Preferences in gpEasy CMS 2.3.3 allows remote attackers to inject arbitrary web script or HTML via the jsoncallback parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBgpEasy 2.3.3 - 'jsoncallback' Cross-Site ScriptingExploitDB exploitby Jakub GalczykNot analyzed1 file
References
448994Third-party advisory
http://secunia.com/advisories/48994 53269vdb entry
http://www.securityfocus.com/bid/53269 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2012-6513