CVE-2012-6510

2022-10-0316:15:28

mitre

www.cve.org

cve-2012-6510

cross-site scripting

remote attackers

arbitrary web script

html

posting

new vehicle

news title

sub user

group name

dealer name

profile

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.5%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) PWRS or (2) Description field when posting a new vehicle; (3) news title when creating news; (4) Name when creating a sub user; (5) group name when creating a group; or (6) dealer name, (7) first name, or (8) last name when changing a profile.