← volver
CVE-2012-4247

CVE-2012-4247

EPSS 2.1%
Multiple cross-site scripting (XSS) vulnerabilities in lists/admin/index.php in phpList before 2.10.19 allow remote attackers to inject arbitrary web script or HTML via the (1) remote_user, (2) remote_database, (3) remote_userprefix, (4) remote_password, or (5) remote_prefix parameter to the import4 page; or the (6) id parameter to the bouncerule page.
Productos afectados
n/a · n/a
PoCs públicas encontradas — 1
exploitdbwww.exploit-db.com/exploits/18419no verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
https://www.httpcs.com/advisorieshttps://www.httpcs.com/advisory/httpcs1https://www.httpcs.com/advisory/httpcs2https://www.httpcs.com/advisory/httpcs3https://www.httpcs.com/advisory/httpcs4https://www.httpcs.com/advisory/httpcs6https://www.httpcs.com/advisory/httpcs7http://www.phplist.com/?lid=579