CVE-2012-1254

Cross-site scripting (XSS) vulnerability in Segue 2.2.10.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

• CWE-79

• http://jvn.jp/en/jp/JVN29083866/index.htmlThird Party Advisory, VDB Entry
• http://jvndb.jvn.jp/jvndb/JVNDB-2012-000052Third Party Advisory, VDB Entry
• http://jvn.jp/en/jp/JVN29083866/index.htmlThird Party Advisory, VDB Entry
• http://jvndb.jvn.jp/jvndb/JVNDB-2012-000052Third Party Advisory, VDB Entry

Published

Jun 4, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-1248app/config/core.php in baserCMS 1.6.15 and earlier does not …
• CVE-2012-1249The iLunascape application 1.0.4.0 and earlier for Android d…
• CVE-2012-1250Logitec LAN-W300N/R routers with firmware before 2.27 do not…
• CVE-2012-1251Opera before 9.63 does not properly verify X.509 certificate…
• CVE-2012-1252Cross-site scripting (XSS) vulnerability in RSSOwl before 2.…
• CVE-2012-1253Cross-site scripting (XSS) vulnerability in Roundcube Webmai…
• CVE-2012-1255SQL injection vulnerability in Segue 2.2.10.2 and earlier al…
• CVE-2012-1256The single sign-on (SSO) implementation in EasyVista before …
• CVE-2012-1257Pidgin 2.10.0 uses DBUS for certain cleartext communication,…5.5
• CVE-2012-1258cgi-bin/userprefs.cgi in Plixer International Scrutinizer Ne…6.5
• CVE-2012-1259Multiple SQL injection vulnerabilities in Plixer Internation…9.8
• CVE-2012-1260Cross-site scripting (XSS) vulnerability in cgi-bin/userpref…6.1