← Back

Arc2

arc2

Vendor: Arc2 Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2012-5873
1Arc2 Project
1Arc2
Feb 3, 2025
Apr 26, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
ARC (aka ARC2) through 2011-12-01 allows reflected XSS via the end_point.php query parameter in an output=htmltab action.
CVE-2012-5872
1Arc2 Project
1Arc2
Feb 3, 2025
Apr 26, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
ARC (aka ARC2) through 2011-12-01 allows blind SQL Injection in getTriplePatternSQL in ARC2_StoreSelectQueryHandler.php via comments in a SPARQL WHERE clause.