QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2012-1110

Back to search

CVE-2012-1110

Published: Sep 6, 2012

Modified: Aug 6, 2024

PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in Etano 1.22 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user, (2) email, (3) email2, (4) f17_zip, or (5) agree parameter to join.php; (6) PATH_INFO, (7) st, (8) f17_city, (9) f17_country, (10) f17_state, (11) f17_zip, (12) f19, (13) wphoto, (14) search, or (15) v parameter to search.php; (16) PATH_INFO or (17) st parameter to photo_search.php; or (18) return parameter to photo_view.php.

VendorProductVersions

n/a

n/a

affected
n/a

References

79827
vdb-entry
x_refsource_OSVDB
48165
third-party-advisory
x_refsource_SECUNIA
79828
vdb-entry
x_refsource_OSVDB
79829
vdb-entry
x_refsource_OSVDB
etano-multiple-xss(73669)
vdb-entry
x_refsource_XF
52295
vdb-entry
x_refsource_BID
79830
vdb-entry
x_refsource_OSVDB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now