Lucene search
+L

CVE-2012-1110

🗓️ 06 Sep 2012 18:00:00Reported by redhatType 
cve
 cve
🔗 web.nvd.nist.gov👁 48 Views🌐 WEB

Multiple XSS vulnerabilities in Etano 1.22 and earlier allow remote attackers to inject arbitrary web script or HTML

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
circl
Circl
CVE-2012-1110
5 Mar 201200:00
circl
cvelist
Cvelist
CVE-2012-1110
6 Sep 201218:00
cvelist
exploitdb
Exploit DB
Etano 1.20/1.22 - 'search.php' Multiple Cross-Site Scripting Vulnerabilities
5 Mar 201200:00
exploitdb
exploitdb
Exploit DB
Etano 1.20/1.22 - 'photo_search.php' Multiple Cross-Site Scripting Vulnerabilities
5 Mar 201200:00
exploitdb
exploitdb
Exploit DB
Etano 1.20/1.22 - 'photo_view.php?return' Cross-Site Scripting
5 Mar 201200:00
exploitdb
euvd
EUVD
EUVD-2012-1144
7 Oct 202500:30
euvd
nvd
NVD
CVE-2012-1110
6 Sep 201218:55
nvd
prion
Prion
Cross site scripting
6 Sep 201218:55
prion
NVD
Node
datemilletanoRange1.22
ParameterPositionPathDescriptionCWE
userquery paramjoin.phpUnfiltered input in multiple parameters leads to XSS in join functionality.CWE-79
emailquery paramjoin.phpUnfiltered input in multiple parameters leads to XSS in join functionality.CWE-79
email2query paramjoin.phpUnfiltered input in multiple parameters leads to XSS in join functionality.CWE-79
f17_zipquery paramjoin.phpUnfiltered input in multiple parameters leads to XSS in join functionality.CWE-79
agreequery paramjoin.phpUnfiltered input in multiple parameters leads to XSS in join functionality.CWE-79
searchquery paramsearch.phpUnfiltered input in search parameters leads to XSS in search results.CWE-79
vquery paramsearch.phpUnfiltered input in search parameters leads to XSS in search results.CWE-79
stpathphoto_search.phpPATH_INFO and st parameter allow unsanitized input to trigger XSS.CWE-79
returnquery paramphoto_view.phpReturn parameter can be used for XSS in the photo view context.CWE-79

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 23:39Current
5.9Medium risk
Vulners AI Score5.9
CVSS 24.3
EPSS0.02715
48