CVE-2012-1247

Published: May 15, 2012Modified: Apr 29, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in KENT-WEB WEB MART 1.7 and earlier, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML by leveraging support for Cascading Style Sheets (CSS) expressions.

Affected (1)

Products: Webcreate: Web Mart

Webcreate

1 product

Web Mart

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Webcreate Web Mart	Version 1.7

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (10)

http://jvn.jp/en/jp/JVN63941302/index.html

Source: vultures@jpcert.or.jp

http://jvndb.jvn.jp/jvndb/JVNDB-2012-000042

Source: vultures@jpcert.or.jp

http://www.kent-web.com/cart/mart.html

Source: vultures@jpcert.or.jp

http://www.securityfocus.com/bid/53541

Source: vultures@jpcert.or.jp

https://exchange.xforce.ibmcloud.com/vulnerabilities/75674

Source: vultures@jpcert.or.jp

http://jvn.jp/en/jp/JVN63941302/index.html