medium4.3Public exploit code
CVE-2012-1217
Multiple cross-site scripting (XSS) vulnerabilities in STHS v2 Web Portal 2.2 allow remote attackers to inject arbitrary web script or HTML via the team parame…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- STHS v2 Web Portal - 'team.php?team' SQL Injection2012-02-13 · webapps · php · Verified
- STHS v2 Web Portal - 'prospect.php?team' SQL Injection2012-02-13 · webapps · php · Verified
- STHS v2 Web Portal - 'prospects.php?team' SQL Injection2012-02-13 · webapps · php · Verified
Impact
Multiple cross-site scripting (XSS) vulnerabilities in STHS v2 Web Portal 2.2 allow remote attackers to inject arbitrary web script or HTML via the team parameter to (1) prospects.php, (2) prospect.php, or (3) team.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Simhl | Sths V2 Web Portal | Version 2.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://0nto.wordpress.com/2012/02/13/sths-v2-web-portal-2-2-sql-injection-vulnerabilty/
- http://packetstormsecurity.org/files/109665/STHS-v2-Web-Portal-2.2-SQL-Injection.html
- http://www.securityfocus.com/bid/51991
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73154
- http://0nto.wordpress.com/2012/02/13/sths-v2-web-portal-2-2-sql-injection-vulnerabilty/
- http://packetstormsecurity.org/files/109665/STHS-v2-Web-Portal-2.2-SQL-Injection.html
- http://www.securityfocus.com/bid/51991
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73154