CVE-2012-1005 Multiple cross-site scripting (XSS) vulnerabilities in Sphinx Software Mobile Web Server 3.1.2.47 allow remote attackers to inject arbitrary web script or HTML via the comment parameter to a blog, as....
MediumCVSS 4.3
EPSS 1.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in Sphinx Software Mobile Web Server 3.1.2.47 allow remote attackers to inject arbitrary web script or HTML via the comment parameter to a blog, as demonstrated using (1) Blog/MyFirstBlog.txt or (2) Blog/AboutSomething.txt.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sphinx-soft mobile web server | = 3.1.2.47 | No fix listed |
References
- secpod.org
- 47876 third-party-advisory vendor-advisory
- 51820 vdb-entry
- sphinixsoftware-comment-xss(72913) vdb-entry