Skip to main content
2012-12-27

2012-12-28

2012-12-29
All (2) Medium (8) Low (2)
Newest CVSS EPSS Oldest
CVE-2012-3871 LOW POC Monitor

Cross-site scripting (XSS) vulnerability in data/hybrid/i_hybrid.php in Open Constructor 3.12.0 allows remote authenticated users to inject arbitrary web script or HTML via the header parameter. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP XSS Openconstructor
NVD
CVSS 2.0
3.5
EPSS
0.2%
CVE-2012-3870 LOW Monitor

Multiple cross-site scripting (XSS) vulnerabilities in objects/createobject.php in Open Constructor 3.12.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) name or. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. No vendor patch available.

PHP XSS Openconstructor
NVD
CVSS 2.0
3.5
EPSS
0.2%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy