Cross-site Scripting Flaw in OSClass by OSClass
CVE-2012-5163

Currently unrated

Key Information:

Vendor

Osclass

Status
Osclass
Vendor
CVE Published:
26 September 2012

What is CVE-2012-5163?

A cross-site scripting (XSS) vulnerability exists in OSClass before version 2.3.5, affecting the oc-admin/ajax/ajax.php script. This flaw allows remote attackers to inject arbitrary web scripts or HTML by manipulating the id parameter in the enable_category action to index.php, potentially compromising the security of the application and its users.

References

http://osclass.org/2012/01/16/osclass-2-3-5/
x_refsource_CONFIRM
https://github.com/osclass/OSClass/commit/ff7ef8a97301aaa...
x_refsource_CONFIRM
http://secunia.com/advisories/47697
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.