CVE-2012-2914

CVE-2012-2914 is a cross-site scripting (XSS) vulnerability affecting the captchademo.php component of Unijimpe Captcha. The underlying issue allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO parameter. The vulnerability is documented in multiple sources (e.g., NVD ...

Unijimpe Captcha - captchademo.php Cross-Site Scripting

Unijimpe Captcha - captchademo.php Cross-Site Scripting source: https://www.securityfocus.com/bid/53585/info The Unijimpe Captcha is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...