CVE-2012-4029

Cross-site scripting (XSS) vulnerability in main/dropbox/index.php in Chamilo LMS before 1.8.8.6 allows remote attackers to inject arbitrary web script or HTML via the category_name parameter in an addsentcategory action.

• CWE-79

• http://support.chamilo.org/attachments/download/2863/chamilo-1.8.8.4-to-1.8.8.6.patchPatch, Vendor Advisory
• https://packetstormsecurity.com/files/115927/Chamilo-1.8.8.4-XSS-File-Deletion.htmlExploit, Third Party Advisory, VDB Entry
• https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-7-2012-07-16-Moderate-risk-Several-moderate-security-flawsVendor Advisory
• http://support.chamilo.org/attachments/download/2863/chamilo-1.8.8.4-to-1.8.8.6.patchPatch, Vendor Advisory
• https://packetstormsecurity.com/files/115927/Chamilo-1.8.8.4-XSS-File-Deletion.htmlExploit, Third Party Advisory, VDB Entry
• https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-7-2012-07-16-Moderate-risk-Several-moderate-security-flawsVendor Advisory

Published

Feb 8, 2020

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-4023CRLF injection vulnerability in Pebble before 2.6.4 allows r…
• CVE-2012-4024Stack-based buffer overflow in the get_component function in…
• CVE-2012-4025Integer overflow in the queue_init function in unsquashfs.c …
• CVE-2012-4026The Johnson Controls Pegasys P2000 server with software befo…
• CVE-2012-4027Directory traversal vulnerability in Tridium Niagara AX Fram…
• CVE-2012-4028Tridium Niagara AX Framework does not properly store credent…
• CVE-2012-4030Chamilo before 1.8.8.6 does not adequately handle user suppl…7.5
• CVE-2012-4031Multiple directory traversal vulnerabilities in src/acloglog…
• CVE-2012-4032Open redirect vulnerability in the login page in WebsitePane…
• CVE-2012-4033Multiple unspecified vulnerabilities in the Zingiri Web Shop…
• CVE-2012-4034Multiple SQL injection vulnerabilities in PBBoard 2.1.4 allo…
• CVE-2012-4035The new_password page in PBBoard 2.1.4 allows remote attacke…