CVEs-PoC/2012/CVE-2012-1027.md

CVE-2012-1027

Description

Cross-site scripting (XSS) vulnerability in account-closed.tcl in ]project-open[ (aka ]po[) 3.4.x, 3.5.0.1-2, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the message parameter to register/account-closed.

POC

Reference

• http://www.kb.cert.org/vuls/id/732115
• http://www.kb.cert.org/vuls/id/732115

Github

No PoCs found on GitHub currently.