Description

Multiple cross-site scripting (XSS) vulnerabilities in Boonex Dolphin before 7.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) explain parameter to explanation.php or the (2) photos_only, (3) online_only, or (4) mode parameters to viewFriends.php.

Remediation

References

CVE-2012-0873

Related Vulnerabilities

Joomla Other Vulnerability (CVE-2006-2960)

WordPress Plugin Entries For WPForms SQL Injection (1.4.0)

PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-1130)

Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-13589)

WordPress Plugin MediaPress Security Bypass (1.1.9)

Severity

Medium

Classification

CVE-2012-0873 CWE-707

Tags

Missing Update Known Vulnerabilities