VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 15, 2012· Updated Jun 16, 2026

CVE-2012-4336

CVE-2012-4336

Description

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flogr 2.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO or (2) an arbitrary parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • Mike Carr/Flogr10 versions
    cpe:2.3:a:mike_carr:flogr:*:*:*:*:*:*:*:*+ 9 more
    • cpe:2.3:a:mike_carr:flogr:*:*:*:*:*:*:*:*range: <=2.5.6
    • cpe:2.3:a:mike_carr:flogr:2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:mike_carr:flogr:2.3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:mike_carr:flogr:2.4:*:*:*:*:*:*:*
    • cpe:2.3:a:mike_carr:flogr:2.5:*:*:*:*:*:*:*
    • cpe:2.3:a:mike_carr:flogr:2.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:mike_carr:flogr:2.5.2:*:*:*:*:*:*:*
    • cpe:2.3:a:mike_carr:flogr:2.5.3:*:*:*:*:*:*:*
    • cpe:2.3:a:mike_carr:flogr:2.5.4:*:*:*:*:*:*:*
    • cpe:2.3:a:mike_carr:flogr:2.5.5:*:*:*:*:*:*:*
  • Flogr/Flogrllm-create
    Range: <=2.5.6

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.