Unrated severityNVD Advisory· Published Aug 13, 2012· Updated Jun 16, 2026
CVE-2012-3869
CVE-2012-3869
Description
Cross-site scripting (XSS) vulnerability in include/classes/class.rex_list.inc.php in REDAXO 4.3.x and 4.4 allows remote attackers to inject arbitrary web script or HTML via the subpage parameter to index.php.
Affected products
6cpe:2.3:a:redaxo:redaxo:4.3:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:redaxo:redaxo:4.3:*:*:*:*:*:*:*
- cpe:2.3:a:redaxo:redaxo:4.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:redaxo:redaxo:4.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:redaxo:redaxo:4.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:redaxo:redaxo:4.4:*:*:*:*:*:*:*
- (no CPE)range: >=4.3, <=4.4
Patches
Vulnerability mechanics
References
5- archives.neohapsis.com/archives/bugtraq/2012-07/0142.htmlnvdExploit
- www.securityfocus.com/bid/54670nvdExploit
- www.htbridge.com/advisory/HTB23098nvdExploit
- secunia.com/advisories/49904nvdVendor Advisory
- www.redaxo.org/de/download/sicherheitshinweise/nvd
News mentions
0No linked articles in our index yet.