CVE-2012-6720 | BDVDB-2026-130522 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in SocialEngine before 4.2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) title parameter to music/create, (2) location parameter to events/create, or (3) search parameter to widget/index/content_id/*.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://seclists.org/oss-sec/2012/q2/396

Exploit#

No public exploit known

History#

Version 12020-02-11Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.