MEDIUM🇵🇱 Wersja polska

CVE-2012-4740

CVSS 4.3v2.0pub. 2012-08-31upd. 2026-04-29

Cross-site scripting (XSS) vulnerability in the captive portal in PacketFence before 3.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS Vector
AV:N/AC:M/Au:N/C:N/I:P/A:N

  • Packetfence

    APP
    Packetfence
    ≤ 3.2.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
XSS
CWE
References

Related vulnerabilities

CVE-2011-4068CRITICAL9.8ten sam produkt

The check_password function in html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to byp...

CVE-2011-4069CRITICAL9.8ten sam produkt

html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to conduct LDAP injection attacks and...

CVE-2012-4742HIGH7.5ten sam produkt

The web_node_register function in web.pm in PacketFence before 3.0.2 might allow remote attackers to execute a...

CVE-2012-4741MEDIUM5.0ten sam produkt

The RADIUS extension in PacketFence before 3.3.0 uses a different user name than is used for authentication fo...