Unrated severityNVD Advisory· Published Jan 24, 2012· Updated Jun 16, 2026
CVE-2012-0040
CVE-2012-0040
Description
Cross-site scripting (XSS) vulnerability in modules/core/www/no_cookie.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTML via the retryURL parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
17cpe:2.3:a:simplesamlphp:simplesamlphp:*:*:*:*:*:*:*:*+ 16 more
- cpe:2.3:a:simplesamlphp:simplesamlphp:*:*:*:*:*:*:*:*range: <=1.8.1
- cpe:2.3:a:simplesamlphp:simplesamlphp:0.4:*:*:*:*:*:*:*
- cpe:2.3:a:simplesamlphp:simplesamlphp:0.5:*:*:*:*:*:*:*
- cpe:2.3:a:simplesamlphp:simplesamlphp:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:simplesamlphp:simplesamlphp:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:simplesamlphp:simplesamlphp:1.2:*:*:*:*:*:*:*
- cpe:2.3:a:simplesamlphp:simplesamlphp:1.3:*:*:*:*:*:*:*
- cpe:2.3:a:simplesamlphp:simplesamlphp:1.4:*:*:*:*:*:*:*
- cpe:2.3:a:simplesamlphp:simplesamlphp:1.5:*:*:*:*:*:*:*
- cpe:2.3:a:simplesamlphp:simplesamlphp:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:simplesamlphp:simplesamlphp:1.6:*:*:*:*:*:*:*
- cpe:2.3:a:simplesamlphp:simplesamlphp:1.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:simplesamlphp:simplesamlphp:1.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:simplesamlphp:simplesamlphp:1.6.3:*:*:*:*:*:*:*
- cpe:2.3:a:simplesamlphp:simplesamlphp:1.7:*:*:*:*:*:*:*
- cpe:2.3:a:simplesamlphp:simplesamlphp:1.8:*:*:*:*:*:*:*
- (no CPE)range: <1.8.2
Patches
Vulnerability mechanics
References
8- secunia.com/advisories/47491nvdVendor Advisory
- secunia.com/advisories/47534nvdVendor Advisory
- www.debian.org/security/2012/dsa-2387nvdVendor Advisory
- code.google.com/p/simplesamlphp/issues/detailnvd
- osvdb.org/78254nvd
- www.openwall.com/lists/oss-security/2012/01/20/20nvd
- www.securityfocus.com/bid/51372nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/72313nvd
News mentions
0No linked articles in our index yet.