Unscored CVE-2012-5176 EUVD-2012-5099GHSA-84ph-vjmm-wh7c

Cross-site scripting (XSS) vulnerability in KENT-WEB ACCESS REPORT 5.02 and earlier allows remote attackers to inject arbitrary web script …

Published Dec 6, 2012 · Updated Sep 16, 2024 · Assigned by jpcert

Description

Cross-site scripting (XSS) vulnerability in KENT-WEB ACCESS REPORT 5.02 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to tag embedding.

References

http://www.kent-web.com/data/report.html
JVNDB-2012-000107 third-party-advisory
JVN#23563149 third-party-advisory