CVE-2012-1787 Multiple cross-site scripting (XSS) vulnerabilities in wgarcmin.cgi in Webglimpse 2.20.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) URL, (2) FILE, or (3) DOM...
MediumCVSS 4.3
EPSS 1.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in wgarcmin.cgi in Webglimpse 2.20.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) URL, (2) FILE, or (3) DOMAIN parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| webglimpse | <= 2.20.0 | No fix listed |
| webglimpse | = 2.2.0 | No fix listed |
| webglimpse | = 2.2.1 | No fix listed |
| webglimpse | = 2.2.2 | No fix listed |
| webglimpse | = 2.3.1 | No fix listed |
| webglimpse | = 2.3.3 | No fix listed |
| webglimpse | = 2.4.0 | No fix listed |
| webglimpse | = 2.4.6 | No fix listed |
| webglimpse | = 2.5.1 | No fix listed |
| webglimpse | = 2.5.4 | No fix listed |
| webglimpse | = 2.6.2 | No fix listed |
| webglimpse | = 2.6.7 | No fix listed |
| webglimpse | = 2.7.4 | No fix listed |
| webglimpse | = 2.7.6 | No fix listed |
| webglimpse | = 2.7.7 | No fix listed |
| webglimpse | = 2.7.8 | No fix listed |
| webglimpse | = 2.8.0 | No fix listed |
| webglimpse | = 2.8.1 | No fix listed |
| webglimpse | = 2.10.1 | No fix listed |
| webglimpse | = 2.10.2 | No fix listed |
| webglimpse | = 2.10.4 | No fix listed |
| webglimpse | = 2.11.0 | No fix listed |
| webglimpse | = 2.12.0 | No fix listed |
| webglimpse | = 2.12.2 | No fix listed |
| webglimpse | = 2.13.0 | No fix listed |
Show 24 more
| Product | Affected versions | Fixed in |
|---|---|---|
| webglimpse | = 2.13.1 | No fix listed |
| webglimpse | = 2.13.2 | No fix listed |
| webglimpse | = 2.14.0 | No fix listed |
| webglimpse | = 2.14.1 | No fix listed |
| webglimpse | = 2.14.2 | No fix listed |
| webglimpse | = 2.14.3 | No fix listed |
| webglimpse | = 2.14.5 | No fix listed |
| webglimpse | = 2.14.6 | No fix listed |
| webglimpse | = 2.14.7 | No fix listed |
| webglimpse | = 2.14.8 | No fix listed |
| webglimpse | = 2.14.9 | No fix listed |
| webglimpse | = 2.15.0 | No fix listed |
| webglimpse | = 2.15.3 | No fix listed |
| webglimpse | = 2.15.5 | No fix listed |
| webglimpse | = 2.16.2 | No fix listed |
| webglimpse | = 2.16.3 | No fix listed |
| webglimpse | = 2.16.4 | No fix listed |
| webglimpse | = 2.17.0 | No fix listed |
| webglimpse | = 2.17.1 | No fix listed |
| webglimpse | = 2.17.2 | No fix listed |
| webglimpse | = 2.17.3 | No fix listed |
| webglimpse | = 2.18.4 | No fix listed |
| webglimpse | = 2.18.5 | No fix listed |
| webglimpse | = 2.18.8 | No fix listed |
References
- 79648 vdb-entry
- packetstormsecurity.org exploit
- 48049 third-party-advisory vendor-advisory
- websecurity.com.ua exploit
- 52170 exploit vdb-entry
- webglimpse-wgarcmin-xss(73485) vdb-entry