CVE

Id
55031  
CVE No.
CVE-2012-1788  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in wonderdesk.cgi in WonderDesk SQL 4.14 allow remote attackers to inject arbitrary web script or HTML via the (1) cus_email parameter in a cust_lostpw action; or (2) help_name, (3) help_email, (4) help_website, or (5) help_example_url parameters in an hd_modify_record action.  
Phase
Assigned (20120319)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
575826 55031 CVE-2012-1788 MISC:http://packetstormsecurity.org/files/110224/WonderDesk-Cross-Site-Scripting.html  View
575827 55031 CVE-2012-1788 MISC:http://st2tea.blogspot.com/2012/02/wonderdesk-cross-site-scripting.html  View
575828 55031 CVE-2012-1788 BID:52193  View
575829 55031 CVE-2012-1788 URL:http://www.securityfocus.com/bid/52193  View
575830 55031 CVE-2012-1788 SECUNIA:48167  View
575831 55031 CVE-2012-1788 URL:http://secunia.com/advisories/48167  View
575832 55031 CVE-2012-1788 XF:wonderdesk-wonderdesk-xss(73502)  View

Related JVN