CVE-2012-1410

Multiple cross-site scripting (XSS) vulnerabilities in the History Window implementation in Kadu 0.9.0 through 0.11.0 allow remote attackers to inject arbitrary web script or HTML via a crafted (1) SMS message, (2) presence message, or (3) status description.

• CWE-79

• http://www.openwall.com/lists/oss-security/2012/02/27/26
• http://www.openwall.com/lists/oss-security/2012/02/27/3Patch
• https://bugzilla.novell.com/show_bug.cgi?id=749036Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=797777Patch
• https://gitorious.org/kadu/kadu/commit/91772e46541e22cbc2c7bf41a1a9798c2a58f6d6Patch
• https://gitorious.org/kadu/kadu/commit/94e7479617d78a1649a0763960edade7ad09a0d0Patch
• https://gitorious.org/kadu/kadu/commit/e9506be6d3dcdd408fdf83d8eb82416c9b798c84Exploit, Patch
• https://gitorious.org/kadu/kadu/commit/ebe3674cf0f3aa9b36308c06e19cb293cc790b52Exploit, Patch
• http://www.openwall.com/lists/oss-security/2012/02/27/26
• http://www.openwall.com/lists/oss-security/2012/02/27/3Patch
• https://bugzilla.novell.com/show_bug.cgi?id=749036Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=797777Patch
• https://gitorious.org/kadu/kadu/commit/91772e46541e22cbc2c7bf41a1a9798c2a58f6d6Patch
• https://gitorious.org/kadu/kadu/commit/94e7479617d78a1649a0763960edade7ad09a0d0Patch
• https://gitorious.org/kadu/kadu/commit/e9506be6d3dcdd408fdf83d8eb82416c9b798c84Exploit, Patch
• https://gitorious.org/kadu/kadu/commit/ebe3674cf0f3aa9b36308c06e19cb293cc790b52Exploit, Patch

Published

Feb 29, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-1404Unspecified vulnerability in the Dolphin Browser Mini (com.d…
• CVE-2012-1405Unspecified vulnerability in the GO Note Widget (com.gau.go.…
• CVE-2012-1406Unspecified vulnerability in the GO Bookmark Widget (com.gau…
• CVE-2012-1407Unspecified vulnerability in the GO Message Widget (com.gau.…
• CVE-2012-1408Unspecified vulnerability in the App Lock (com.cc.applock) a…
• CVE-2012-1409Unspecified vulnerability in the Tiny Password (com.tinycouc…
• CVE-2012-1413Cross-site scripting (XSS) vulnerability in zc_install/inclu…
• CVE-2012-1414Cross-site request forgery (CSRF) vulnerability in manager/n…
• CVE-2012-1415Cross-site request forgery (CSRF) vulnerability in lib/logou…
• CVE-2012-1416Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2012-1417Multiple cross-site scripting (XSS) vulnerabilities in Local…
• CVE-2012-1418Multiple unspecified vulnerabilities in Google Chrome before…