Cross-Site Scripting Vulnerability in Acuity CMS by Acuity
CVE-2012-4745

Currently unrated

Key Information:

Vendor: The Collective
Status: Acuity Cms
Vendor: CVE Published:; 31 August 2012

🔔 Create The Collective Vulnerability Alert

What is CVE-2012-4745?

A cross-site scripting (XSS) vulnerability exists in the login page (admin/login.asp) of Acuity CMS version 2.6.2. This vulnerability enables remote attackers to inject arbitrary HTML or web script code through the UserName parameter, potentially compromising the security and integrity of user sessions. By exploiting this flaw, malicious actors can execute harmful scripts in the context of the user's session, leading to data theft or further attacks within the application.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/74919

vdb-entryx_refsource_XF

http://www.securityfocus.com/bid/53048

vdb-entryx_refsource_BID

http://archives.neohapsis.com/archives/bugtraq/2012-04/01...

mailing-listx_refsource_BUGTRAQ

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 31, 2012
Vulnerability Reserved
Aug 31, 2012

CVE-2012-4745 Data

JSON