CVEvulnerability
CVE-2012-6506
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-01-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Zingiri Web Shop plugin 2.4.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter in zing.inc.php or (2) notes parameter in fws/pages-front/onecheckout.php.
Affected configurations
• zingiri zingiri web shop 2.4.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://plugins.trac.wordpress.org/changeset?reponame=&old=537613%40zingiri-web-shop&new=537613%40zingiri-web-shop Exploit, Patch
- http://secunia.com/advisories/48991 Vendor Advisory
- http://wordpress.org/extend/plugins/zingiri-web-shop/changelog/ wordpress.org
- http://www.exploit-db.com/exploits/18787 Exploit
- http://www.osvdb.org/81492 www.osvdb.org
- http://www.osvdb.org/81493 www.osvdb.org
- http://www.securityfocus.com/bid/53278 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75178 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75179 exchange.xforce.ibmcloud.com
- http://plugins.trac.wordpress.org/changeset?reponame=&old=537613%40zingiri-web-shop&new=537613%40zingiri-web-shop Exploit, Patch
- http://secunia.com/advisories/48991 Vendor Advisory
- http://wordpress.org/extend/plugins/zingiri-web-shop/changelog/ wordpress.org
- http://www.exploit-db.com/exploits/18787 Exploit
- http://www.osvdb.org/81492 www.osvdb.org
- http://www.osvdb.org/81493 www.osvdb.org
- http://www.securityfocus.com/bid/53278 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75178 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75179 exchange.xforce.ibmcloud.com