CVE-2012-2452

Multiple cross-site scripting (XSS) vulnerabilities in pragmaMx 1.x before 1.12.2 allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter to modules.php or (2) img_url to includes/wysiwyg/spaw/editor/plugins/imgpopup/img_popup.php.

• CWE-79

• http://www.pragmamx.org/Forum-topic-33554.htmlIssue Tracking, Vendor Advisory
• http://www.pragmamx.org/News-pragmaMx-1.12-Servicepack2-item-706.htmlVendor Advisory
• https://www.htbridge.com/advisory/HTB23090Exploit, Third Party Advisory
• http://www.pragmamx.org/Forum-topic-33554.htmlIssue Tracking, Vendor Advisory
• http://www.pragmamx.org/News-pragmaMx-1.12-Servicepack2-item-706.htmlVendor Advisory
• https://www.htbridge.com/advisory/HTB23090Exploit, Third Party Advisory

Published

Feb 11, 2020

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-2446Cross-site scripting (XSS) vulnerability in tools/local_look…
• CVE-2012-2447Cross-site request forgery (CSRF) vulnerability in accountmg…
• CVE-2012-2448VMware ESXi 3.5 through 5.0 and ESX 3.5 through 4.1 allow re…
• CVE-2012-2449VMware Workstation 8.x before 8.0.3, VMware Player 4.x befor…
• CVE-2012-2450VMware Workstation 8.x before 8.0.3, VMware Player 4.x befor…
• CVE-2012-2451The Config::IniFiles module before 2.71 for Perl creates tem…
• CVE-2012-2455Advanced Productivity Software DTE Axiom before 12.3.3 does …
• CVE-2012-2456Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2012-2459Unspecified vulnerability in bitcoind and Bitcoin-Qt before …
• CVE-2012-2469Cisco NX-OS 4.2, 5.0, 5.1, and 5.2 on Nexus 7000 series swit…
• CVE-2012-2472Cisco Adaptive Security Appliances (ASA) 5500 series devices…
• CVE-2012-2474Memory leak on Cisco Adaptive Security Appliances (ASA) 5500…