CVE-2012-5343 Cross-site scripting (XSS) vulnerability in admin/login.php in Limny 3.0.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO, related to the "PHP_SELF" variable.
MediumCVSS 4.3
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in admin/login.php in Limny 3.0.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO, related to the "PHP_SELF" variable.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| limny | = 3.0.1 | No fix listed |
References
- 78093 vdb-entry
- packetstormsecurity.org exploit
- 47444 third-party-advisory vendor-advisory
- www.limny.org patch
- 51261 exploit vdb-entry
- www.zeroscience.mk exploit
- limny-login-xss(72113) vdb-entry