CVE-2012-0974

Multiple cross-site scripting XSS vulnerabilities in the getParam function in oc-includes/osclass/core/Params.php in OSClass before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via the 1 sCity, 2 sPattern, 3 sPriceMax, and 4 sPriceMin parameters in a search action to...

CVE-2012-0974

OSClass

CVE-2012-0974

creationtimestamp| type| source ---|---|--- 2012-01-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36626...