Cross-Site Scripting Vulnerability in Chevereto by Chevereto
CVE-2012-2918

Currently unrated

Key Information:

Vendor: Chevereto
Status: Chevereto
Vendor: CVE Published:; 21 May 2012

What is CVE-2012-2918?

A Cross-Site Scripting (XSS) vulnerability exists in the upload engine of Chevereto version 1.91, allowing remote attackers to execute arbitrary web scripts or inject HTML through the 'v' parameter. This vulnerability can lead to various security issues, such as unauthorized access to sensitive information or exploitation of user sessions.

References

http://www.securityfocus.com/bid/53448

vdb-entryx_refsource_BID

https://exchange.xforce.ibmcloud.com/vulnerabilities/75476

vdb-entryx_refsource_XF

http://packetstormsecurity.org/files/112585/Chevreto-Uplo...

x_refsource_MISC

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
May 21, 2012
Vulnerability Reserved
May 21, 2012

CVE-2012-2918 Data

JSON