Dokeos 2.1.1 has multiple XSS issues involving "extra_" parameters in main/auth/profile.php.
References
Link | Resource |
---|---|
http://www.openwall.com/lists/oss-security/2012/11/02/10 | Exploit Mailing List Third Party Advisory |
https://cxsecurity.com/issue/WLB-2012110007 | Exploit Issue Tracking Third Party Advisory |
Configurations
Information
Published : 2020-01-29 07:15
Updated : 2020-01-31 05:32
NVD link : CVE-2012-5776
Mitre link : CVE-2012-5776
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
dokeos
- dokeos