CVEvulnerability
CVE-2012-1219
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-02-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in freelancerKit 2.35 allow remote attackers to inject arbitrary web script or HTML via the (1) ticket parameter to tickets.php, (2) title parameter to notes.php, or (3) task parameter to todo.php. NOTE: some of these details are obtained from third party information.
Affected configurations
• freelancerkit freelancerkit 2.35
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/47766 Vendor Advisory
- http://www.securityfocus.com/bid/51946 www.securityfocus.com
- http://www.vulnerability-lab.com/get_content.php?id=402 www.vulnerability-lab.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73104 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/47766 Vendor Advisory
- http://www.securityfocus.com/bid/51946 www.securityfocus.com
- http://www.vulnerability-lab.com/get_content.php?id=402 www.vulnerability-lab.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73104 exchange.xforce.ibmcloud.com