QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2012-1469

Back to search

CVE-2012-1469

Published: Sep 6, 2012

Modified: Aug 6, 2024

PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in Open Journal Systems before 2.3.7 allow remote attackers and remote authenticated users to inject arbitrary web script or HTML via the (1) editor or (2) callback parameters to lib/pkp/lib/tinymce/jscripts/tiny_mce/plugins/ibrowser/ibrowser.php in the iBrowser plugin, (3) authors[][url] parameter to index.php, or (4) Bio Statement or (5) Abstract of Submission fields to the stripUnsafeHtml function in lib/pkp/classes/core/String.inc.php.

VendorProductVersions

n/a

n/a

affected
n/a

References

open-journal-articleid-xss(74228)
vdb-entry
x_refsource_XF
open-journal-index-xss(74225)
vdb-entry
x_refsource_XF
48449
third-party-advisory
x_refsource_SECUNIA
open-journal-editor-xss(74227)
vdb-entry
x_refsource_XF
80257
vdb-entry
x_refsource_OSVDB
80255
vdb-entry
x_refsource_OSVDB
48464
third-party-advisory
x_refsource_SECUNIA
80256
vdb-entry
x_refsource_OSVDB
open-journal-string-xss(74226)
vdb-entry
x_refsource_XF

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now