CVEvulnerability
CVE-2012-10005
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-01-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 3.5 LOW — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
- CVSS 3.1 ([email protected])
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
A vulnerability has been found in manikandan170890 php-form-builder-class and classified as problematic. Affected by this vulnerability is an unknown functionality of the file PFBC/Element/Textarea.php of the component Textarea Handler. The manipulation of the argument value leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The patch is named 74897993818d826595fd5857038e6703456a594a. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218155.
Affected configurations
• php-form-builder-class project php-form-builder-class (< 2012-11-22)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://code.google.com/archive/p/php-form-builder-class/issues/184 Exploit, Third Party Advisory
- https://github.com/manikandan170890/php-form-builder-class/commit/74897993818d826595fd5857038e6703456a594a Patch, Third Party Advisory
- https://vuldb.com/?ctiid.218155 Permissions Required, Third Party Advisory
- https://vuldb.com/?id.218155 Permissions Required, Third Party Advisory
- https://code.google.com/archive/p/php-form-builder-class/issues/184 Exploit, Third Party Advisory
- https://github.com/manikandan170890/php-form-builder-class/commit/74897993818d826595fd5857038e6703456a594a Patch, Third Party Advisory
- https://vuldb.com/?ctiid.218155 Permissions Required, Third Party Advisory
- https://vuldb.com/?id.218155 Permissions Required, Third Party Advisory