CVE-2012-5343

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.93%

Published

Oct 9, 2012

Modified

Apr 28, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBLimny 3.0.1 - 'login.php' Script Cross-Site Scripting TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in admin/login.php in Limny 3.0.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO, related to the "PHP_SELF" variable.

Weaknesses (CWE)

CWE-79

Affected Products (1)

limny · limnyvulnerable

References (14)

http://osvdb.org/78093

http://packetstormsecurity.org/files/108355/ZSL-2012-5066.txt

Exploit

http://secunia.com/advisories/47444

Vendor Advisory

http://www.limny.org/releases/limny-3.0.2.7z

Patch

http://www.securityfocus.com/bid/51261

Exploit

http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5066.php

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/72113

http://osvdb.org/78093

http://packetstormsecurity.org/files/108355/ZSL-2012-5066.txt

Exploit

http://secunia.com/advisories/47444

Vendor Advisory

http://www.limny.org/releases/limny-3.0.2.7z

Patch

http://www.securityfocus.com/bid/51261

Exploit

http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5066.php

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/72113

KEV Catalog EPSS Scores Vendors All CVEs