Unscored CVE-2012-5175 EUVD-2012-5098GHSA-9g9m-7c93-hpvq

Cross-site scripting (XSS) vulnerability in KENT-WEB ACCESS REPORT 4.2 and earlier allows remote attackers to inject arbitrary web script o…

Published Dec 6, 2012 · Updated Sep 16, 2024 · Assigned by jpcert

Description

Cross-site scripting (XSS) vulnerability in KENT-WEB ACCESS REPORT 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to access-log data.

References

http://www.kent-web.com/data/report.html
JVNDB-2012-000106 third-party-advisory
JVN#68830017 third-party-advisory