CVE-2012-6514 Cross-site scripting (XSS) vulnerability in the nBill (com_nbill) component 2.3.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the message parameter in an income acti...
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the nBill (com_nbill) component 2.3.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the message parameter in an income action to administrator/index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netshinesoftware com netinvoice | = 2.3.2 | No fix listed |
References
- hauntit.blogspot.com exploit
- packetstormsecurity.org exploit
- 49004 third-party-advisory vendor-advisory
- 53275 vdb-entry