CVE-2012-2117

Cross-site scripting (XSS) vulnerability in the Gigya - Social optimization module 6.x before 6.x-3.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

• CWE-79

• http://drupal.org/node/1515084Patch
• http://drupal.org/node/1538704Patch, Vendor Advisory
• http://secunia.com/advisories/48832Vendor Advisory
• http://www.openwall.com/lists/oss-security/2012/04/18/11
• http://www.openwall.com/lists/oss-security/2012/04/19/1
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75025
• http://drupal.org/node/1515084Patch
• http://drupal.org/node/1538704Patch, Vendor Advisory
• http://secunia.com/advisories/48832Vendor Advisory
• http://www.openwall.com/lists/oss-security/2012/04/18/11
• http://www.openwall.com/lists/oss-security/2012/04/19/1
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75025

Published

Aug 31, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-2111The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights…
• CVE-2012-2112Cross-site scripting (XSS) vulnerability in the Exception Ha…
• CVE-2012-2113Multiple integer overflows in tiff2pdf in libtiff before 4.0…
• CVE-2012-2114Stack-based buffer overflow in fprintf in musl before 0.8.8 …
• CVE-2012-2115SQL injection vulnerability in interface/login/validateUser.…
• CVE-2012-2116Cross-site request forgery (CSRF) vulnerability in the Comme…
• CVE-2012-2118Format string vulnerability in the LogVHdrMessageVerb functi…
• CVE-2012-2119Buffer overflow in the macvtap device driver in the Linux ke…
• CVE-2012-2120latex2man in texlive-extra-utils 2011.20120322, and possibly…
• CVE-2012-2121The KVM implementation in the Linux kernel before 3.3.4 does…
• CVE-2012-2122sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x be…
• CVE-2012-2123The cap_bprm_set_creds function in security/commoncap.c in t…