CVE-2012-4679

Cross-site scripting (XSS) vulnerability in admin/login.php in Newscoop before 3.5.5 allows remote attackers to inject arbitrary web script or HTML via the f_user_name parameter.

• CWE-79

• http://dev.sourcefabric.org/browse/CS-4184
• http://secunia.com/advisories/48769Vendor Advisory
• http://www.securityfocus.com/bid/52941
• http://www.sourcefabric.org/en/newscoop/latestrelease/1141/Newscoop-355-and-Newscoop-4-RC4-security-releases.htmPatch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74781
• https://www.htbridge.com/advisory/HTB23084Exploit
• http://dev.sourcefabric.org/browse/CS-4184
• http://secunia.com/advisories/48769Vendor Advisory
• http://www.securityfocus.com/bid/52941
• http://www.sourcefabric.org/en/newscoop/latestrelease/1141/Newscoop-355-and-Newscoop-4-RC4-security-releases.htmPatch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74781
• https://www.htbridge.com/advisory/HTB23084Exploit

Published

Aug 27, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-4673SQL injection vulnerability in application/controllers/invoi…
• CVE-2012-4674PluXml before 5.1.6 allows remote attackers to obtain the in…
• CVE-2012-4675Cross-site scripting (XSS) vulnerability in PluXml 5.1.6 all…
• CVE-2012-4676The errorExitIfAttackViaString function in Tunnelblick 3.3be…
• CVE-2012-4677Tunnelblick 3.3beta20 and earlier allows local users to gain…
• CVE-2012-4678munin-cgi-graph for Munin 2.0 rc4 does not delete temporary …
• CVE-2012-4680Directory traversal vulnerability in the XML Server in IOSer…
• CVE-2012-4681Multiple vulnerabilities in the Java Runtime Environment (JR…9.8
• CVE-2012-4682Unspecified vulnerability in bitcoind and Bitcoin-Qt allows …
• CVE-2012-4683Unspecified vulnerability in bitcoind and Bitcoin-Qt allows …
• CVE-2012-4684The alert functionality in bitcoind and Bitcoin-Qt before 0.…
• CVE-2012-4685Cross-site scripting (XSS) vulnerability in Arbor Networks P…