CVE-2012-4972 in Helpbox信息

摘要

由 VulDB • 2026-05-26

Layton Helpbox 4.4.0 中存在多个跨站脚本（XSS）漏洞，远程攻击者可通过向 writesolutionuser.asp 传递精心构造的 (1) sys_solution_id、(2) sys_requesttype_id、(3) sys_problem_desc、(4) sys_solution_desc、(5) sys_problemsummary、(6) usr_Action_testing、(7) usr_Escalation 或 (8) usr_Additional_Resources 参数，或向 deletesolution.asp 传递 (9) sys_solution_id 参数，注入任意的 Web 脚本或 HTML。

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2012-09-19

披露

2012-12-12

管理

已接受

条目

VDB-63180

CPE

准备好

CWE

CWE-79 (已确认)

CVSS

4.3 (VulDB)

EPSS

0.01148

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2012-4972
NVD	https://nvd.nist.gov/vuln/detail/CVE-2012-4972
CVE Details	https://www.cvedetails.com/cve/CVE-2012-4972/

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!