VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 15, 2012· Updated Apr 29, 2026

CVE-2012-4336

CVE-2012-4336

Description

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flogr 2.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO or (2) an arbitrary parameter.

Affected products

10
  • Mike Carr/Flogr10 versions
    cpe:2.3:a:mike_carr:flogr:*:*:*:*:*:*:*:*+ 9 more
    • cpe:2.3:a:mike_carr:flogr:*:*:*:*:*:*:*:*range: <=2.5.6
    • cpe:2.3:a:mike_carr:flogr:2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:mike_carr:flogr:2.3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:mike_carr:flogr:2.4:*:*:*:*:*:*:*
    • cpe:2.3:a:mike_carr:flogr:2.5:*:*:*:*:*:*:*
    • cpe:2.3:a:mike_carr:flogr:2.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:mike_carr:flogr:2.5.2:*:*:*:*:*:*:*
    • cpe:2.3:a:mike_carr:flogr:2.5.3:*:*:*:*:*:*:*
    • cpe:2.3:a:mike_carr:flogr:2.5.4:*:*:*:*:*:*:*
    • cpe:2.3:a:mike_carr:flogr:2.5.5:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.