CVE-2012-5175

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

Cross-site scripting (XSS) vulnerability in KENT-WEB ACCESS REPORT 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to access-log data.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Dec 6, 2012
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2012

CVE-2012-51764.3Cross-site scripting (XSS) vulnerability in KENT-WEB ACCESS REPORT 5.02 and earlier allows remote attackers to inject arbitrary web script oCVE-2012-51774.3Cross-site scripting (XSS) vulnerability in the Welcart plugin before 1.2.2 for WordPress allows remote attackers to inject arbitrary web scCVE-2012-51786.8Cross-site request forgery (CSRF) vulnerability in the Welcart plugin before 1.2.2 for WordPress allows remote attackers to hijack the autheCVE-2012-51792.1The Boat Browser application before 4.2 and Boat Browser Mini application before 3.9 for Android do not properly implement the WebView classCVE-2012-51804.3The Opera Mobile application before 12.1 and Opera Mini application before 7.5 for Android do not properly implement the WebView class, whicCVE-2012-51814.3Cross-site scripting (XSS) vulnerability in concrete5 Japanese 5.5.1 through 5.5.2.1 and concrete5 English 5.5.0 through 5.6.0.2 allows remoCVE-2012-51824.3The Loctouch application 3.4.6 and earlier for Android does not properly handle implicit intents, which allows attackers to obtain sensitiveCVE-2012-51832.6The Loctouch application 3.4.6 and earlier for Android allows attackers to obtain sensitive information about logged locations via a craftedCVE-2012-51844.3Cross-site scripting (XSS) vulnerability in the Olive Toast Documents Pro File Viewer (formerly Files HD) app before 1.11.1 for iOS allows rCVE-2012-51857.5Directory traversal vulnerability in the Olive Toast Documents Pro File Viewer (formerly Files HD) app before 1.11.1 for iOS allows remote aCVE-2012-51864.3Cross-site scripting (XSS) vulnerability in FLUGELz netmania myu-s and PHP WeblogSystem allows remote attackers to inject arbitrary web scriCVE-2012-51874.3The Weathernews Touch application 2.3.2 and earlier for Android allows attackers to obtain sensitive information about logged locations via
CVE-2012-5175: Medium severity, CVSS 4.3 | Vulnix