CVE-2012-6131

Published: Apr 11, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in cgi/client.py in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the @action parameter to support/issue1.

Affected (20)

Products: Roundup Tracker: Roundup

Roundup Tracker

1 product

Roundup

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Roundup Tracker Roundup	Up to 1.4.19
Roundup Tracker Roundup	Version 1.4.0
Roundup Tracker Roundup	Version 1.4.10
Roundup Tracker Roundup	Version 1.4.11
Roundup Tracker Roundup	Version 1.4.12
Roundup Tracker Roundup	Version 1.4.13
Roundup Tracker Roundup	Version 1.4.14
Roundup Tracker Roundup	Version 1.4.15
Roundup Tracker Roundup	Version 1.4.16
Roundup Tracker Roundup	Version 1.4.17
Roundup Tracker Roundup	Version 1.4.18
Roundup Tracker Roundup	Version 1.4.1
Roundup Tracker Roundup	Version 1.4.2
Roundup Tracker Roundup	Version 1.4.3
Roundup Tracker Roundup	Version 1.4.4
Roundup Tracker Roundup	Version 1.4.5
Roundup Tracker Roundup	Version 1.4.6
Roundup Tracker Roundup	Version 1.4.7
Roundup Tracker Roundup	Version 1.4.8
Roundup Tracker Roundup	Version 1.4.9