CVE-2012-2769

Multiple cross-site scripting (XSS) vulnerabilities in the topic administration page in the Extension::MobileUI extension before 1.02 for Best Practical Solutions RT 3.8.x and in Best Practical Solutions RT before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

• CWE-79

• http://lists.bestpractical.com/pipermail/rt-announce/2012-July/000208.htmlPatch, Vendor Advisory
• http://secunia.com/advisories/50010Vendor Advisory
• http://www.securityfocus.com/bid/54684
• https://exchange.xforce.ibmcloud.com/vulnerabilities/77211
• http://lists.bestpractical.com/pipermail/rt-announce/2012-July/000208.htmlPatch, Vendor Advisory
• http://secunia.com/advisories/50010Vendor Advisory
• http://www.securityfocus.com/bid/54684
• https://exchange.xforce.ibmcloud.com/vulnerabilities/77211

Published

Aug 15, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-2759Cross-site scripting (XSS) vulnerability in login-with-ajax.…
• CVE-2012-2760mod_auth_openid before 0.7 for Apache uses world-readable pe…
• CVE-2012-2762SQL injection vulnerability in include/functions_trackbacks.…
• CVE-2012-2763Buffer overflow in the readstr_upto function in plug-ins/scr…
• CVE-2012-2764Untrusted search path vulnerability in Google Chrome before …
• CVE-2012-2768Multiple cross-site scripting (XSS) vulnerabilities in the t…
• CVE-2012-2770The Authen::ExternalAuth extension before 0.11 for Best Prac…
• CVE-2012-2771Unspecified vulnerability in FFmpeg before 0.10.3 has unknow…
• CVE-2012-2772Unspecified vulnerability in the ff_rv34_decode_frame functi…
• CVE-2012-2773Unspecified vulnerability in FFmpeg before 0.10.3 has unknow…
• CVE-2012-2774The ff_MPV_frame_start function in libavcodec/mpegvideo.c in…
• CVE-2012-2775Unspecified vulnerability in the read_var_block_data functio…