Unscored CVE-2012-2637 EUVD-2012-2623GHSA-v683-455w-8f46

Cross-site scripting (XSS) vulnerability in KENT-WEB WEB PATIO 4.04 and earlier might allow remote attackers to inject arbitrary web script…

Published Jun 19, 2012 · Updated Sep 17, 2024 · Assigned by jpcert

Description

Cross-site scripting (XSS) vulnerability in KENT-WEB WEB PATIO 4.04 and earlier might allow remote attackers to inject arbitrary web script or HTML via a crafted cookie.

References

http://www.kent-web.com/bbs/patio.html
JVNDB-2012-000062 third-party-advisory
JVN#58102473 third-party-advisory