CVE-2012-0872

Multiple cross-site scripting (XSS) vulnerabilities in OxWall 1.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1)…

published March 19, 2012

CVSS
—
EPSS
1%
Percentile
71.2
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in OxWall 1.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) captchaField, (2) email, (3) form_name, (4) password, (5) realname, (6) repeatPassword, or (7) username parameters to Oxwall/join; (8) captcha, (9) email, (10) form_name, (11) from, or (12) subject parameters to Oxwall/contact; (13) tag parameter to Oxwall/blogs/browse-by-tag; or (14) PATH_INFO to Oxwall/photo/viewlist/tagged, (15) Oxwall/photo/viewlist, or (16) Oxwall/video/viewlist.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01355 · 71.2th percentile
Published
2012-03-19T19:00Z
EPSS history
Timeline
  • 19 MAR 19:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in OxWall 1.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1)…
    cvelistv5