Multiple Cross-Site Scripting Vulnerabilities in XOOPS by XOOPS Foundation
CVE-2012-0984

Currently unrated

Key Information:

Vendor: Xoops
Status: Xoops
Vendor: CVE Published:; 11 September 2014

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 20%

What is CVE-2012-0984?

Several cross-site scripting vulnerabilities exist in XOOPS versions prior to 2.5.5, allowing remote attackers to inject arbitrary web scripts or HTML. The vulnerabilities can be exploited through various parameters including to_userid in the pmlite.php module and others in the xoopsimagebrowser.php file, enabling attackers to execute malicious scripts within the context of a user's browser session.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2012-0984 - Proof of Concept