CVE-2012-4259

Cross-site scripting (XSS) vulnerability in the contacts in (1) XPhone UC Web and the (2) web frontend for XPhone Virtual Directory in C4B XPhone Unified Communications (UC) 2011 Web 4.1.890S R1 allows remote attackers to inject arbitrary web script or HTML via the company name. NOTE: some of these details are obtained from third party information.

• CWE-79

• http://archives.neohapsis.com/archives/bugtraq/2012-04/0216.htmlExploit
• http://osvdb.org/81559
• http://secunia.com/advisories/48979Vendor Advisory
• http://security.inshell.net/advisory/16Exploit
• http://www.exploit-db.com/exploits/18802Exploit
• http://www.securityfocus.com/bid/53283Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75221
• http://archives.neohapsis.com/archives/bugtraq/2012-04/0216.htmlExploit
• http://osvdb.org/81559
• http://secunia.com/advisories/48979Vendor Advisory
• http://security.inshell.net/advisory/16Exploit
• http://www.exploit-db.com/exploits/18802Exploit
• http://www.securityfocus.com/bid/53283Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75221

Published

Aug 13, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-4253Multiple directory traversal vulnerabilities in MySQLDumper …
• CVE-2012-4254MySQLDumper 1.24.4 allows remote attackers to obtain sensiti…
• CVE-2012-4255MySQLDumper 1.24.4 allows remote attackers to obtain sensiti…
• CVE-2012-4256The jNews (com_jnews) component 7.5.1 for Joomla! allows rem…
• CVE-2012-4257Yaqas (Yet Another Question & Answer System) 1.0 Alpha 1 all…
• CVE-2012-4258Multiple SQL injection vulnerabilities in MYRE Real Estate S…
• CVE-2012-4260Multiple SQL injection vulnerabilities in myCare2x allow rem…
• CVE-2012-4261SQL injection vulnerability in modules/patient/mycare2x_pat_…
• CVE-2012-4262Multiple cross-site scripting (XSS) vulnerabilities in myCar…
• CVE-2012-4263Cross-site scripting (XSS) vulnerability in inc/admin/conten…
• CVE-2012-4264Multiple cross-site scripting (XSS) vulnerabilities in the B…
• CVE-2012-4265SQL injection vulnerability in category_edit.php in Proman X…