CVE

Id
59875  
CVE No.
CVE-2012-6632  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Vessio NetBill 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) full name or (2) file title to accounts/admin/index.php or (3) comment parameter in the support page to accounts/index2.php.  
Phase
Assigned (20140116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
606022 59875 CVE-2012-6632 MISC:http://packetstormsecurity.org/files/112655/NetBill-Billing-System-1.2-CSRF-XSS.html  View
606023 59875 CVE-2012-6632 MISC:http://www.vulnerability-lab.com/get_content.php?id=560  View
606024 59875 CVE-2012-6632 OSVDB:81880  View
606025 59875 CVE-2012-6632 URL:http://www.osvdb.org/81880  View
606026 59875 CVE-2012-6632 SECUNIA:49109  View
606027 59875 CVE-2012-6632 URL:http://secunia.com/advisories/49109  View
606028 59875 CVE-2012-6632 XF:netbill-index-xss(75538)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30448 JVNDB-2012-006156 Apache Cordova および Adobe PhoneGap におけるホワイトリスト保護メカニズムを回避される脆弱性 Apache Cordova および Adobe PhoneGap は、ドメイン名の正規表現の終わりを固定しないため、ホワイトリスト保護メカニズムを回避される脆弱性が存在します。 CVE-2012-6637 59875 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006156.html  View