CVE-2012-2235

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2012-2235
Cross-site scripting (XSS) vulnerability in Support Incident Tracker (SiT!) 3.65 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter to index.php, which is not properly handled in an error message.

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
https://www.trustwave.com/spiderlabs/advisories/TWSL2012-012.txt Exploit
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:sitracker:support_incident_tracker:*:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:1.8.00:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:2.8.00:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:3.00:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:3.00:beta1:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:3.00:beta2:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:3.00:beta3:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:3.01:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:3.02:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:3.03:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:3.03a:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:3.04a:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:3.05:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:3.6:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:3.06:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:3.07:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:3.45:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:3.45:beta1:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:3.50:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:3.50:beta1:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:3.51:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:3.60:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:3.61:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:3.62:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:3.63:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:3.63:beta1:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:3.64:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:4.8.00:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:7.8.00:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:8.8.00:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:9.8.00:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:10.8.00:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:11.8.00:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:14.8.00:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:16.8.00:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:17.8.00:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:18.8.00:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:21.8.00:*:*:*:*:*:*:*
cpe:2.3:a:sitracker:support_incident_tracker:31.07.00:*:*:*:*:*:*:*
History

No history.

Information

Published : 2012-05-27 19:55

Updated : 2024-02-04 18:16

NVD link : CVE-2012-2235

Mitre link : CVE-2012-2235

CVE.ORG link : CVE-2012-2235

JSON object : View

Products Affected

sitracker

  • support_incident_tracker
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')