Unrated severityNVD Advisory· Published Sep 26, 2012· Updated Jun 16, 2026

CVE-2012-5163

Description

Cross-site scripting (XSS) vulnerability in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allows remote attackers to inject arbitrary web script or HTML via the id parameter in an enable_category action to index.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Osclass/Osclass2 versions
cpe:2.3:a:osclass:osclass:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:osclass:osclass:*:*:*:*:*:*:*:*range: <=2.3.4
- (no CPE)range: <2.3.5

Patches

Vulnerability mechanics

References

osclass.org/2012/01/16/osclass-2-3-5/nvdPatchVendor Advisory
secunia.com/advisories/47697nvdVendor Advisory
github.com/osclass/OSClass/commit/ff7ef8a97301aaaf6a97fe46c2c27981a86b4e2fnvdVendor Advisory
www.codseq.it/advisories/multiple_vulnerabilities_in_osclassnvd
exchange.xforce.ibmcloud.com/vulnerabilities/78962nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000