CVE-2012-0900

2012-01-2017:00:00

mitre

www.cve.org

AI Score

5.8

Confidence

High

EPSS

0.033

Percentile

91.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Beehive Forum 1.0.1 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) forum/register.php or (2) forum/logon.php.

References

archives.neohapsis.com/archives/bugtraq/2012-01/0103.html

secunia.com/advisories/47595

www.darksecurity.de/advisories/SSCHADV2011-042.txt

www.securityfocus.com/bid/51424

exchange.xforce.ibmcloud.com/vulnerabilities/72411