medium4.3Public exploit code
CVE-2012-1782
Multiple cross-site scripting (XSS) vulnerabilities in questions/ask in OSQA 3b allow remote attackers to inject arbitrary web script or HTML via the (1) url b…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- OSQA's CMS - Multiple HTML Injection Vulnerabilities2012-02-27 · webapps · php · Verified
Impact
Multiple cross-site scripting (XSS) vulnerabilities in questions/ask in OSQA 3b allow remote attackers to inject arbitrary web script or HTML via the (1) url bar or (2) picture bar.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Osqa | Osqa | Version 3b |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2012-02/0164.html
- http://www.securityfocus.com/bid/52184
- http://www.vulnerability-lab.com/get_content.php?id=461
- http://archives.neohapsis.com/archives/bugtraq/2012-02/0164.html
- http://www.securityfocus.com/bid/52184
- http://www.vulnerability-lab.com/get_content.php?id=461