CVE-2012-1470

CVE-2012-1470 describes multiple XSS vulnerabilities in ocPortal before 7.1.6, triggered via the code_editor.php endpoint when user-supplied values in the path or line parameters are reflected back to the browser. Exploitation allows remote attackers to inject arbitrary web script or HTML. The re...

CVE-2012-1470

creationtimestamp| type| source ---|---|--- 2012-03-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37022...