NVD

Id
43659  
Name
CVE-2012-1788  
Description
Multiple cross-site scripting (XSS) vulnerabilities in wonderdesk.cgi in WonderDesk SQL 4.14 allow remote attackers to inject arbitrary web script or HTML via the (1) cus_email parameter in a cust_lostpw action; or (2) help_name, (3) help_email, (4) help_website, or (5) help_example_url parameters in an hd_modify_record action.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-03-19  
Modified Date
2012-11-19  
Seq
2012-1788  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
219468 43659 CVE-2012-1788 http://packetstormsecurity.org/files/110224/WonderDesk-Cross-Site-Scripting.html  View
219469 43659 CVE-2012-1788 http://st2tea.blogspot.com/2012/02/wonderdesk-cross-site-scripting.html  View
219470 43659 CVE-2012-1788 52193  View
219471 43659 CVE-2012-1788 wonderdesk-wonderdesk-xss(73502)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26127 JVNDB-2012-001834 WonderDesk SQL の wonderdesk.cgi におけるクロスサイトスクリプティングの脆弱性 WonderDesk SQL の wonderdesk.cgi には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-1788 55026 CVE-2012-1788 43659 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001834.html 2012-03-19 2012-03-22 View