CVE-2012-1027 Cross-site scripting (XSS) vulnerability in account-closed.tcl in ]project-open[ (aka ]po[) 3.4.x, 3.5.0.1-2, and possibly other versions allows remote attackers to inject arbitrary web script or HTML...
MediumCVSS 4.3
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in account-closed.tcl in ]project-open[ (aka ]po[) 3.4.x, 3.5.0.1-2, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the message parameter to register/account-closed.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| project-open | = 3.4.0 | No fix listed |
| project-open | = 3.5.0.1-2 | No fix listed |
References
- dl.packetstormsecurity.net exploit
- 78823 vdb-entry
- 47854 third-party-advisory vendor-advisory
- VU#732115 exploit third-party-advisory us-government-resource
- 51842 exploit vdb-entry
- projectopen-accountclosed-xss(72952) vdb-entry