CVE

Id
57080  
CVE No.
CVE-2012-3837  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in apps/users/registration.template.php in Baby Gekko 1.2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) email_address, (3) password, (4) password_verify, (5) firstname, (6) lastname, or (7) verification_code parameter to users/action/register. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20120703)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
590317 57080 CVE-2012-3837 EXPLOIT-DB:18827  View
590318 57080 CVE-2012-3837 URL:http://www.exploit-db.com/exploits/18827  View
590319 57080 CVE-2012-3837 MISC:http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5086.php  View
590320 57080 CVE-2012-3837 CONFIRM:http://www.babygekko.com/site/news/general/baby-gekko-v1-2-0-released-with-3rd-party-independent-security-testing-performed-by-zero-science-lab.html  View
590321 57080 CVE-2012-3837 BID:53366  View
590322 57080 CVE-2012-3837 URL:http://www.securityfocus.com/bid/53366  View
590323 57080 CVE-2012-3837 SECUNIA:49052  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27295 JVNDB-2012-003002 JBMC Software DirectAdmin の CMD_DOMAIN におけるクロスサイトスクリプティングの脆弱性 JBMC Software DirectAdmin の CMD_DOMAIN には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-3842 57080 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003002.html  View