CVEvulnerability
CVE-2012-1247
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2012-05-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in KENT-WEB WEB MART 1.7 and earlier, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML by leveraging support for Cascading Style Sheets (CSS) expressions.
Affected configurations
• webcreate web mart 1.7
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://jvn.jp/en/jp/JVN63941302/index.html jvn.jp
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000042 jvndb.jvn.jp
- http://www.kent-web.com/cart/mart.html www.kent-web.com
- http://www.securityfocus.com/bid/53541 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75674 exchange.xforce.ibmcloud.com
- http://jvn.jp/en/jp/JVN63941302/index.html jvn.jp
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000042 jvndb.jvn.jp
- http://www.kent-web.com/cart/mart.html www.kent-web.com
- http://www.securityfocus.com/bid/53541 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75674 exchange.xforce.ibmcloud.com