Lucene search
+L

CVE-2012-5700

🗓️ 22 Sep 2014 15:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 68 Views🌐 WEB

XSS vulnerabilities in Baby Gekko before 1.2.2f allow remote attackers to inject arbitrary web script or HTML via various parameters.

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
0day.today
BabyGekko 1.2.2e XSS / LFI / SQL Injection Vulnerabilities
15 Nov 201200:00
zdt
Circl
CVE-2012-5700
15 Nov 201200:00
circl
Cvelist
CVE-2012-5700
22 Sep 201415:00
cvelist
Exploit DB
BabyGekko 1.2.2e - Multiple Vulnerabilities
15 Nov 201200:00
exploitdb
EUVD
EUVD-2012-5583
7 Oct 202500:30
euvd
exploitpack
BabyGekko 1.2.2e - Multiple Vulnerabilities
15 Nov 201200:00
exploitpack
htbridge
Multiple vulnerabilities in BabyGekko
24 Oct 201200:00
htbridge
NVD
CVE-2012-5700
22 Sep 201415:55
nvd
OpenVAS
Baby Gekko CMS Multiple Vulnerabilities
24 Sep 201400:00
openvas
Packet Storm
BabyGekko 1.2.2e XSS / LFI / SQL Injection
15 Nov 201200:00
packetstorm
Rows per page
ParameterPositionPathDescriptionCWE
appquery paramadmin/index.phpSQL injection in admin panel via keyword when app=users (PoC demonstrates UNION-based and load_file-based injections)CWE-89
ajaxquery paramadmin/index.phpSQL injection in admin panel via keyword when app=users (PoC demonstrates UNION-based and load_file-based injections)CWE-89
actionquery paramadmin/index.phpSQL injection in admin panel via keyword when app=users (PoC demonstrates UNION-based and load_file-based injections)CWE-89
keywordquery paramadmin/index.phpSQL injection in admin panel via keyword when app=users (PoC demonstrates UNION-based and load_file-based injections)CWE-89
appquery paramadmin/index.phpSQL injection in admin panel via keyword (alternative PoC)CWE-89
ajaxquery paramadmin/index.phpSQL injection in admin panel via keyword (alternative PoC)CWE-89
actionquery paramadmin/index.phpSQL injection in admin panel via keyword (alternative PoC)CWE-89
keywordquery paramadmin/index.phpSQL injection in admin panel via keyword (alternative PoC)CWE-89
appquery paramadmin/index.phpSQL injection in admin panel via query parameter (app=html)CWE-89
actionquery paramadmin/index.phpSQL injection in admin panel via query parameter (app=html)CWE-89
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 23:47Current
8.3High risk
Vulners AI Score8.3
CVSS 24.3
EPSS0.01815
68