CVE-2012-1787

Public PoC / Exploit (2)

Exploit-DBWebglimpse 2.x - Multiple Cross-Site Scripting Vulnerabilities TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple cross-site scripting (XSS) vulnerabilities in wgarcmin.cgi in Webglimpse 2.20.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) URL, (2) FILE, or (3) DOMAIN parameters.

Weaknesses (CWE)

CWE-79

Affected Products (49)

webglimpse · webglimpsevulnerable

References (12)

http://osvdb.org/79648

http://packetstormsecurity.org/files/110219/Webglimpse-Brute-Force-Cross-Site-Scripting.html

Exploit

http://secunia.com/advisories/48049

Vendor Advisory

http://websecurity.com.ua/3089/

Exploit

http://www.securityfocus.com/bid/52170

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/73485

http://osvdb.org/79648

http://packetstormsecurity.org/files/110219/Webglimpse-Brute-Force-Cross-Site-Scripting.html

Exploit

http://secunia.com/advisories/48049

Vendor Advisory

http://websecurity.com.ua/3089/

Exploit

http://www.securityfocus.com/bid/52170

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/73485