CVE-2012-4384

letodms has multiple XSS issues: Reflected XSS in Login Page, Stored XSS in Document Owner/User name, Stored XSS in Calendar

• CWE-79

• http://www.openwall.com/lists/oss-security/2012/08/31/19Exploit, Mailing List, Third Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-4384Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/08/31/19Exploit, Mailing List, Third Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-4384Third Party Advisory

Published

Nov 13, 2019

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-4378Multiple cross-site scripting (XSS) vulnerabilities in Media…
• CVE-2012-4379MediaWiki before 1.18.5, and 1.19.x before 1.19.2 does not s…
• CVE-2012-4380MediaWiki before 1.18.5, and 1.19.x before 1.19.2 allows rem…
• CVE-2012-4381MediaWiki before 1.18.5, and 1.19.x before 1.19.2 saves pass…8.1
• CVE-2012-4382MediaWiki before 1.18.5, and 1.19.x before 1.19.2 does not p…
• CVE-2012-4383contao prior to 2.11.4 has a sql injection vulnerability8.8
• CVE-2012-4385letodms 3.3.6 has CSRF via change password6.5
• CVE-2012-4386The token check mechanism in Apache Struts 2.0.0 through 2.3…
• CVE-2012-4387Apache Struts 2.0.0 through 2.3.4 allows remote attackers to…
• CVE-2012-4388The sapi_header_op function in main/SAPI.c in PHP 5.4.0RC2 t…
• CVE-2012-4389Incomplete blacklist vulnerability in lib/migrate.php in own…
• CVE-2012-4390(1) apps/calendar/appinfo/remote.php and (2) apps/contacts/a…