CVE-2012-10005

MEDIO 6.1CVE-2012-10005 · Published 12/01/2023 · updated 16/06/2026

In breve

CVE-2012-10005 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda php-form-builder-class (php-form-builder-class project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.64%, superiore al 51.0% delle vulnerabilità.
Correzione: aggiornare a 2012-11-22 o successiva.

Package	Affected versions	Patched versions
php-form-builder-class php-form-builder-class_project	`< 2012-11-22`	`2012-11-22`

Description

A vulnerability has been found in manikandan170890 php-form-builder-class and classified as problematic. Affected by this vulnerability is an unknown functionality of the file PFBC/Element/Textarea.php of the component Textarea Handler. The manipulation of the argument value leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The patch is named 74897993818d826595fd5857038e6703456a594a. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218155.

References

code.google.com/archive/p/php-form-builder-class/issues/184 · Exploit
manikandan170890/php-form-builder-class commit 7489799 · Patch
vuldb.com · Permissions Required
vuldb.com · Permissions Required

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free