CVE-2012-4890

Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS 2011 08.09.2 and earlier allow remote attackers to inject arbitrary web script or HTML via a (1) comment to the news, (2) title to the news, or (3) the folder names in a gallery.

• CWE-79

• http://packetstormsecurity.org/files/111473/Flatnux-CMS-2011-08.09.2-CSRF-XSS-Directory-Traversal.htmlExploit
• http://secunia.com/advisories/48656Vendor Advisory
• http://secunia.com/advisories/48676Vendor Advisory
• http://www.osvdb.org/80877
• http://www.securityfocus.com/bid/52846
• http://www.vulnerability-lab.com/get_content.php?id=487
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74566
• http://packetstormsecurity.org/files/111473/Flatnux-CMS-2011-08.09.2-CSRF-XSS-Directory-Traversal.htmlExploit
• http://secunia.com/advisories/48656Vendor Advisory
• http://secunia.com/advisories/48676Vendor Advisory
• http://www.osvdb.org/80877
• http://www.securityfocus.com/bid/52846
• http://www.vulnerability-lab.com/get_content.php?id=487
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74566

Published

Sep 10, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-4882Multiple untrusted search path vulnerabilities in 3D XML Pla…
• CVE-2012-4883Multiple untrusted search path vulnerabilities in 3DVIA Comp…
• CVE-2012-4884Argument injection vulnerability in Request Tracker (RT) 3.8…
• CVE-2012-4885The wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.…
• CVE-2012-4886Stack-based buffer overflow in wpsio.dll in Kingsoft WPS Off…
• CVE-2012-4889Multiple cross-site scripting (XSS) vulnerabilities in Manag…
• CVE-2012-4891Cross-site scripting (XSS) vulnerability in fw/index2.do in …
• CVE-2012-4892Multiple cross-site scripting (XSS) vulnerabilities in Flatn…
• CVE-2012-4893Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2012-4894Google SketchUp before 8.0.14346 (aka 8 Maintenance 3) allow…
• CVE-2012-4895Heap-based buffer overflow in SumatraPDF before 2.1 allows r…
• CVE-2012-4896Heap-based buffer overflow in SumatraPDF before 2.1 allows r…