CVE-2018-12234

🗓️ 06 Sep 2018 23:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 57 Views🌐 WEB

A Reflected Cross Site Scripting (XSS) Vulnerability in Adrenalin 5.4.0 HRMS Softwar

Reporter	Title	Published	Views	Family All 11
0day.today	Adrenalin Core HCM 5.4.0 - (strAction) Reflected Cross-Site Scripting Vulnerability	12 Nov 201900:00	–	zdt
CNVD	Adrenalin HRMS Software Cross-Site Scripting Vulnerability	10 Sep 201800:00	–	cnvd
Cvelist	CVE-2018-12234	6 Sep 201823:00	–	cvelist
Exploit DB	Adrenalin Core HCM 5.4.0 - 'strAction' Reflected Cross-Site Scripting	12 Nov 201900:00	–	exploitdb
EUVD	EUVD-2018-4212	7 Oct 202500:30	–	euvd
exploitpack	Adrenalin Core HCM 5.4.0 - strAction Reflected Cross-Site Scripting	12 Nov 201900:00	–	exploitpack
NVD	CVE-2018-12234	6 Sep 201823:29	–	nvd
OSV	CVE-2018-12234	6 Sep 201823:29	–	osv
Packet Storm	Adrenalin Core HCM 5.4.0 Cross Site Scripting	12 Nov 201900:00	–	packetstorm
Prion	Cross site scripting	6 Sep 201823:29	–	prion

NVD

Node

Source	Link
knowcybersec	www.knowcybersec.com/2018/09/first-cve-2018-12234-reflected-XSS.html
thecysec	www.thecysec.in/2020/04/xxs-adrenalin-generalinfo-cve-id.html
packetstormsecurity	www.packetstormsecurity.com/files/155231/Adrenalin-Core-HCM-5.4.0-Cross-Site-Scripting.html
securethy	www.securethy.com/2018/09/first-cve-2018-12234-reflected-XSS.html

Parameter	Position	Path	Description	CWE
strAction	query param	Adrenalin/flexiportal/GeneralInfo.aspx	Reflected XSS vulnerability where user input in strAction is echoed back in JavaScript within the HTML response.	CWE-79
strAction	query param	myadrenalin/flexiportal/GeneralInfo.aspx	Reflected XSS vulnerability where user input in strAction is echoed back in JavaScript within the HTML response.	CWE-79

02 Mar 2026 16:16Current

6Medium risk

Vulners AI Score6

CVSS 24.3

CVSS 36.1

EPSS0.0477