CVE-2012-0873
23.02.2012, 20:07
Multiple cross-site scripting (XSS) vulnerabilities in Boonex Dolphin before 7.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) explain parameter to explanation.php or the (2) photos_only, (3) online_only, or (4) mode parameters to viewFriends.php.
Cross-site Scripting
| Vendor | Product | Version |
|---|---|---|
| boonex | dolphin | 𝑥 ≤ 7.0.7 |
| boonex | dolphin | 5.1 |
| boonex | dolphin | 5.2 |
| boonex | dolphin | 6.1.2 |
| boonex | dolphin | 7.0.0 |
| boonex | dolphin | 7.0.1 |
| boonex | dolphin | 7.0.2 |
| boonex | dolphin | 7.0.3 |
| boonex | dolphin | 7.0.3 |
| boonex | dolphin | 7.0.4 |
| boonex | dolphin | 7.0.5 |
| boonex | dolphin | 7.0.6 |
𝑥
= Vulnerable software versions
References