CVE-2012-6132

Published: Apr 10, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the otk parameter.

Affected (20)

Products: Roundup Tracker: Roundup

Roundup Tracker

1 product

Roundup

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Roundup Tracker Roundup	Up to 1.4.19
Roundup Tracker Roundup	Version 1.4.0
Roundup Tracker Roundup	Version 1.4.10
Roundup Tracker Roundup	Version 1.4.11
Roundup Tracker Roundup	Version 1.4.12
Roundup Tracker Roundup	Version 1.4.13
Roundup Tracker Roundup	Version 1.4.14
Roundup Tracker Roundup	Version 1.4.15
Roundup Tracker Roundup	Version 1.4.16
Roundup Tracker Roundup	Version 1.4.17
Roundup Tracker Roundup	Version 1.4.18
Roundup Tracker Roundup	Version 1.4.1
Roundup Tracker Roundup	Version 1.4.2
Roundup Tracker Roundup	Version 1.4.3
Roundup Tracker Roundup	Version 1.4.4
Roundup Tracker Roundup	Version 1.4.5
Roundup Tracker Roundup	Version 1.4.6
Roundup Tracker Roundup	Version 1.4.7
Roundup Tracker Roundup	Version 1.4.8
Roundup Tracker Roundup	Version 1.4.9