CVE-2012-6608

Cross-site scripting XSS vulnerability in xmlservices/Ebook.php in Elastix 2.3.0 allows remote attackers to inject arbitrary web script or HTML via the Page parameter...

CVE-2012-6608

CVE-2012-6608 is a cross-site scripting (XSS) vulnerability in Elastix 2.3.0 affecting xmlservices/E_book.php, exploitable via the Page parameter. The issue is documented across multiple feeds: Elastix 2.3.0 E_book.php XSS (NVD/Red Hat/CVE lists) and OpenVAS summaries. Affected component is the w...

CVE-2012-6608: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in xmlservices/Ebook.php in Elastix 2.3.0 allows remote attackers to inject arbitrary web script or HTML via the Page parameter...

Elastix 2.3.0 Cross Site Scripting

! /usr/bin/python Author cheki Date 28/11/2012 Test on Linuxmint Vendor Elastix.org Exploit: https://192.168.2.199/xmlservices/Ebook.php?Page=2%3Cscript%3Ealert%28%221%22%29;%3C/script%3E Vulnerability $Page Parameter Ebook.php file $Page = $GET'Page'; // Page index $idxphone = $GET'phone'; //...