Description

Cross-site scripting (XSS) vulnerability in preferences.php in PHP Address Book 7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the from parameter. NOTE: the index.php vector is already covered by CVE-2008-2566.

Remediation

References

CVE-2012-1912

Related Vulnerabilities

OpenVPN AS Other Vulnerability (CVE-2006-1629)

Caddy Web Server URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2022-29718)

Perl Numeric Errors Vulnerability (CVE-2010-1158)

Magento Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-7942)

WordPress Plugin Scout bazar Cross-Site Scripting (1.3.3)

Severity

Medium

Classification

CVE-2012-1912 CWE-707

Tags

Missing Update Known Vulnerabilities