NVD

Id
43130  
Name
CVE-2012-1110  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Etano 1.22 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user, (2) email, (3) email2, (4) f17_zip, or (5) agree parameter to join.php; (6) PATH_INFO, (7) st, (8) f17_city, (9) f17_country, (10) f17_state, (11) f17_zip, (12) f19, (13) wphoto, (14) search, or (15) v parameter to search.php; (16) PATH_INFO or (17) st parameter to photo_search.php; or (18) return parameter to photo_view.php.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-09-06  
Modified Date
2012-09-13  
Seq
2012-1110  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
216941 43130 CVE-2012-1110 20120305 Etano 1.x <= Multiple Cross Site Scripting Vulnerabilities  View
216942 43130 CVE-2012-1110 [oss-security] 20120306 Etano 1.x <= Multiple Cross Site Scripting Vulnerabilities  View
216943 43130 CVE-2012-1110 [oss-security] 20120305 Re: Etano 1.x <= Multiple Cross Site Scripting Vulnerabilities  View
216944 43130 CVE-2012-1110 52295  View
216945 43130 CVE-2012-1110 etano-multiple-xss(73669)  View
216946 43130 CVE-2012-1110 http://yehg.net/lab/pr0js/advisories/%5Betano_1.2.x%5D_xss  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28461 JVNDB-2012-004168 Etano におけるクロスサイトスクリプティングの脆弱性 Etano には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-1110 54348 CVE-2012-1110 43130 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004168.html 2012-09-06 2012-09-11 View