Unrated severityNVD Advisory· Published Feb 7, 2012· Updated Apr 29, 2026
CVE-2012-1005
CVE-2012-1005
Description
Multiple cross-site scripting (XSS) vulnerabilities in Sphinx Software Mobile Web Server 3.1.2.47 allow remote attackers to inject arbitrary web script or HTML via the comment parameter to a blog, as demonstrated using (1) Blog/MyFirstBlog.txt or (2) Blog/AboutSomething.txt.
Affected products
1- cpe:2.3:a:sphinx-soft:mobile_web_server:3.1.2.47:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4News mentions
0No linked articles in our index yet.