CVE-2012-1027

Cross-site scripting (XSS) vulnerability in account-closed.tcl in ]project-open[ (aka ]po[) 3.4.x, 3.5.0.1-2, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the message parameter to register/account-closed.

• CWE-79

• http://dl.packetstormsecurity.net/1202-exploits/projectopen-xss.txtExploit
• http://osvdb.org/78823
• http://secunia.com/advisories/47854Vendor Advisory
• http://www.kb.cert.org/vuls/id/732115Exploit, US Government Resource
• http://www.securityfocus.com/bid/51842Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72952
• http://dl.packetstormsecurity.net/1202-exploits/projectopen-xss.txtExploit
• http://osvdb.org/78823
• http://secunia.com/advisories/47854Vendor Advisory
• http://www.kb.cert.org/vuls/id/732115Exploit, US Government Resource
• http://www.securityfocus.com/bid/51842Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72952

Published

Feb 8, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-1021Cross-site scripting (XSS) vulnerability in admin/categories…
• CVE-2012-1022SQL injection vulnerability in admin/categories.php in 4imag…
• CVE-2012-1023Open redirect vulnerability in admin/index.php in 4images 1.…
• CVE-2012-1024Directory traversal vulnerability in file in Enigma2 Webinte…
• CVE-2012-1025Absolute path traversal vulnerability in file in Enigma2 Web…
• CVE-2012-1026Multiple SQL injection vulnerabilities in login2.php in XRay…
• CVE-2012-1028Cross-site scripting (XSS) vulnerability in bin/index.php in…
• CVE-2012-1029SQL injection vulnerability in mobile/search/index.php in Tu…
• CVE-2012-1030Cross-site scripting (XSS) vulnerability in DotNetNuke 6.x t…
• CVE-2012-1031Unspecified vulnerability in EPiServer CMS 5 and 6 through 6…
• CVE-2012-1032Cross-site scripting (XSS) vulnerability in the Euroling Sit…
• CVE-2012-1033The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cache…