CVE-2012-5053

Cross-site scripting (XSS) vulnerability in the Receiver Web User Interface on Trimble Infrastructure GNSS Series Receivers NetR3, NetR5, NetR8, and NetR9 before 4.70, and NetRS before 1.3-2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

• CWE-79

• http://archives.neohapsis.com/archives/bugtraq/2013-01/0063.htmlBroken Link
• http://trl.trimble.com/docushare/dsweb/Get/Document-636664/NetRS_1%203-2_RelNotes.pdfVendor Advisory
• http://trl.trimble.com/docushare/dsweb/Get/Document-644791/Infrastructure_GNSS-SeriesReceivers_4.70_RelNotes.pdfVendor Advisory
• http://archives.neohapsis.com/archives/bugtraq/2013-01/0063.htmlBroken Link
• http://trl.trimble.com/docushare/dsweb/Get/Document-636664/NetRS_1%203-2_RelNotes.pdfVendor Advisory
• http://trl.trimble.com/docushare/dsweb/Get/Document-644791/Infrastructure_GNSS-SeriesReceivers_4.70_RelNotes.pdfVendor Advisory

Published

Mar 7, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-5039The BGP Router process in Cisco IOS before 12.2(50)SY1 allow…
• CVE-2012-5044Cisco IOS before 15.3(1)T, when media flow-around is not use…
• CVE-2012-5048APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allo…
• CVE-2012-5049APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allo…
• CVE-2012-5050Cross-site scripting (XSS) vulnerability in the server in VM…
• CVE-2012-5051Directory traversal vulnerability in VMware CapacityIQ 1.5.x…
• CVE-2012-5054Integer overflow in the copyRawDataTo method in the Matrix3D…8.8
• CVE-2012-5055DaoAuthenticationProvider in VMware SpringSource Spring Secu…
• CVE-2012-5056Multiple cross-site scripting (XSS) vulnerabilities in ownCl…
• CVE-2012-5057CRLF injection vulnerability in ownCloud Server before 4.0.8…
• CVE-2012-5058Unspecified vulnerability in the Oracle iStore component in …
• CVE-2012-5059Unspecified vulnerability in the PeopleSoft PeopleTools comp…