PT-2012-3538 · Tidal · Webglimpse

Published 2012-03-19 · Updated 2018-01-11 · CVE-2012-1787

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Webglimpse versions 2.20.0 and earlier

Description The issue allows remote attackers to inject arbitrary web script or HTML via the URL, FILE, or DOMAIN parameters in the wgarcmin.cgi component.

Recommendations For Webglimpse versions 2.20.0 and earlier, consider restricting access to the wgarcmin.cgi component until a fix is available, and avoid using the URL, FILE, or DOMAIN parameters in this component to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2012-1787

Affected Products

Webglimpse

References · 8

• 🔥 http://securityfocus.com/bid/52170 · Exploit
• 🔥 http://websecurity.com.ua/3089 · Exploit
• 🔥 http://packetstormsecurity.org/files/110219/Webglimpse-Brute-Force-Cross-Site-Scripting.html · Exploit
• 🔥 https://exploit-db.com/exploits/36883 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-1787 · Security Note
• http://secunia.com/advisories/48049 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73485 · Note
• http://osvdb.org/79648 · Note