Vulnerability Details CVE-2012-0989
Cross-site scripting (XSS) vulnerability in OneOrZero AIMS 2.8.0 Trial Edition build231211 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 64.5%
CVSS Severity
CVSS v2 Score 4.3
References
- http://archives.neohapsis.com/archives/bugtraq/2012-01/0117.html
- http://www.securityfocus.com/bid/51549
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72456
- https://www.htbridge.ch/advisory/xss_in_oneorzero_aims.html
- http://archives.neohapsis.com/archives/bugtraq/2012-01/0117.html
- http://www.securityfocus.com/bid/51549
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72456
- https://www.htbridge.ch/advisory/xss_in_oneorzero_aims.html
Products affected by CVE-2012-0989
-
cpe:2.3:a:oneorzero:action_and_information_management_system:2.8.0