4.3
CVSSv2

CVE-2012-1470

Published: 01/10/2012 Updated: 02/10/2012
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Multiple cross-site scripting (XSS) vulnerabilities in code_editor.php in ocPortal prior to 7.1.6 allow remote malicious users to inject arbitrary web script or HTML via the (1) path or (2) line parameters.

Vulnerable Product Search on Vulmon Subscribe to Product

ocportal ocportal 7.0

ocportal ocportal 6.2

ocportal ocportal 6.1.1

ocportal ocportal 6.1

ocportal ocportal 7.1.1

ocportal ocportal 7.1

ocportal ocportal 6.0.2

ocportal ocportal 6.0

ocportal ocportal 5.0.3

ocportal ocportal 5.0.2

ocportal ocportal 4.3.1

ocportal ocportal 4.3

ocportal ocportal 4.2

ocportal ocportal 4.1.3

ocportal ocportal 4.1.9

ocportal ocportal 4.1.6

ocportal ocportal 4.1.4

ocportal ocportal 4.0.4

ocportal ocportal 5.0.1

ocportal ocportal 5.0

ocportal ocportal 4.3.2

ocportal ocportal 4.1.13

ocportal ocportal 4.1.12

ocportal ocportal 4.1.11

ocportal ocportal 4.1.10

ocportal ocportal 4.0.2

ocportal ocportal 4.0.1

ocportal ocportal 4.0

ocportal ocportal

ocportal ocportal 7.1.4

ocportal ocportal 7.1.3

ocportal ocportal 7.1.2

ocportal ocportal 4.2.2

ocportal ocportal 4.2.1

ocportal ocportal 4.1.2

ocportal ocportal 4.1.1

ocportal ocportal 4.1

ocportal ocportal 7.0.1

ocportal ocportal 6.0.3

ocportal ocportal 6.0.1

ocportal ocportal 5.1

ocportal ocportal 4.1.8

ocportal ocportal 4.1.5

ocportal ocportal 4.0.5

ocportal ocportal 4.0.3

Exploits

source: wwwsecurityfocuscom/bid/52768/info ocPortal is prone to multiple cross-site scripting vulnerabilities and an arbitrary file-disclosure vulnerability because the application fails to sufficiently sanitize user-supplied data An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting us ...