CVE-2012-5105 Multiple cross-site scripting (XSS) vulnerabilities in SQLiteManager 1.2.4 allow remote attackers to inject arbitrary web script or HTML via the dbsel parameter to (1) main.php or (2) index.php; or (3...
MediumCVSS 4.3
EPSS 5.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in SQLiteManager 1.2.4 allow remote attackers to inject arbitrary web script or HTML via the dbsel parameter to (1) main.php or (2) index.php; or (3) nsextt parameter to index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sqlitemanager | = 1.2.4 | No fix listed |
References
- 20120105 SQLiteManager 1.2.4 Multiple Cross-Site-Scripting vulnerabilities exploit mailing-list
- 28642 third-party-advisory vendor-advisory
- 78137 exploit vdb-entry
- 78138 exploit vdb-entry
- 51294 exploit vdb-entry
- sqlitemanager-multiple-xss(72141) vdb-entry