CVE-2012-0984

Description

References

• archives.neohapsis.com/archives/bugtraq/2012-04/0128.html · Exploit
• osvdb.org/81212
• osvdb.org/81213
• packetstormsecurity.org/files/111958/XOOPS-2.5.4-Cross-Site-Scripting.html · Exploit
• secunia.com/advisories/48887
• exploit-db.com/exploits/18753 · Exploit
• securityfocus.com/bid/53143
• xoops.org/modules/news/article.php · Patch
• exchange.xforce.ibmcloud.com/vulnerabilities/75024
• htbridge.com/advisory/multiple_vulnerabilities_in_xoops.html · Exploit

xoops 的其他漏洞

• CVE-2023-36217严重 9.0Cross Site Scripting vulnerability in Xoops CMS v.2.5.10 allows a remote attacker to execute arbitrary code via the category name field of t…
• CVE-2019-16684中危 4.8An issue was discovered in the image-manager in Xoops 2.5.10. When any image with a JavaScript payload as its name is hovered over in the li…
• CVE-2019-16683中危 4.8An issue was discovered in the image-manager in Xoops 2.5.10. When the breadcrumb showing the category name is hovered over while editing an…
• CVE-2017-12139中危 6.1XOOPS Core 2.5.8 has stored XSS in imagemanager.php because of missing MIME type validation in htdocs/class/uploader.php.
• CVE-2017-12138中危 6.1XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php because of the URL filter.