Unscored severity · published Mar 19, 2012
CVE-2012-1782
Multiple cross-site scripting (XSS) vulnerabilities in questions/ask in OSQA 3b allow remote attackers to inject arbitrary web script or HTML via the (1) url bar or (2) picture…
–
CVSS
1.6%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in questions/ask in OSQA 3b allow remote attackers to inject arbitrary web script or HTML via the (1) url bar or (2) picture bar.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OS
Osqa · Osqa
3b · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-1782
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-1782
Exploit
http://archives.neohapsis.com/archives/bugtraq/2012-02/0164.html
Exploit
http://www.securityfocus.com/bid/52184
www.vulnerability-lab.com
http://www.vulnerability-lab.com/get_content.php?id=461
More from Osqa
–
CVE-2012-1245
Cross-site scripting (XSS) vulnerability in the cleanup_urls function in forum/utils/html.py in OSQA before 1234, and 0.9.0 Beta 3 and earlier, allows remote attackers to inject…