CVE-2012-5700 in Baby Gekko
Resumen (Inglés)
Multiple cross-site scripting (XSS) vulnerabilities in Baby Gekko before 1.2.2f allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to admin/index.php or the (2) username or (3) password parameter in blocks/loginbox/loginbox.template.php to index.php. NOTE: some of these details are obtained from third party information.
Reservar
2012-10-31
Divulgación
2014-09-22
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 71435 | Baby Gekko secuencias de comandos en sitios cruzados | 79 | Alto | Arreglo oficial | CVE-2012-5700 |