CVE-2012-4744 Cross-site scripting (XSS) vulnerability in ssearch.php in the Siche search module 0.5 for Zeroboard allows remote attackers to inject arbitrary web script or HTML via the search parameter.
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in ssearch.php in the Siche search module 0.5 for Zeroboard allows remote attackers to inject arbitrary web script or HTML via the search parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| eos.pe siche search module | = 0.5 | No fix listed |
References
- 20120414 Siche Search v.0.5 Zerboard - Multiple Web Vulnerabilities mailing-list
- 81179 vdb-entry
- 53035 vdb-entry
- www.vulnerability-lab.com
- sichesearch-ssearch-xss(74914) vdb-entry