← Back

Arc2 Project

arc2_project

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Arc2
arc2
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2012-5873
1Arc2 Project
1Arc2
Feb 3, 2025
Apr 26, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
ARC (aka ARC2) through 2011-12-01 allows reflected XSS via the end_point.php query parameter in an output=htmltab action.
CVE-2012-5872
1Arc2 Project
1Arc2
Feb 3, 2025
Apr 26, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
ARC (aka ARC2) through 2011-12-01 allows blind SQL Injection in getTriplePatternSQL in ARC2_StoreSelectQueryHandler.php via comments in a SPARQL WHERE clause.