Skip to content
Fencer Intel
medium 4.3

CVE-2012-1664 json

Multiple cross-site scripting (XSS) vulnerabilities in the admin panel in osCMax before 2.5.1 allow remote attackers to inject arbitrary we…

published 2015-05-20 11 y ago modified 2026-06-16 4 mo ago also EUVD-2012-1674

cvss
4.3
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
2.8%
EPSS 2.8% chance of exploitation in 30 days, percentile 86%
public exploits
9
Exploit-DB

Summary

Multiple cross-site scripting (XSS) vulnerabilities in the admin panel in osCMax before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter in a process action to admin/login.php; (2) pageTitle, (3) current_product_id, or (4) cPath parameter to admin/new_attributes_include.php; (5) sb_id, (6) sb_key, (7) gc_id, (8) gc_key, or (9) path parameter to admin/htaccess.php; (10) title parameter to admin/information_form.php; (11) search parameter to admin/xsell.php; (12) gross or (13) max parameter to admin/stats_products_purchased.php; (14) status parameter to admin/stats_monthly_sales.php; (15) sorted parameter to admin/stats_customers.php; (16) information_id parameter to /admin/information_manager.php; or (17) zID parameter to /admin/geo_zones.php.

Patch / fix

Timeline

  1. First public exploit (EDB-37046)
  2. Published

Exploit prediction

2.81% chance of exploitation in the next 30 days, higher than 86% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

  • EDB-37046 osCMax 2.5 - '/admin/new_attributes_include.php' Multiple Cross-Site Scripting Vulnerabilities webapps, 2012-04-04
  • EDB-37045 osCMax 2.5 - '/admin/geo_zones.php?zID' Cross-Site Scripting webapps, 2012-04-04
  • EDB-37044 osCMax 2.5 - '/admin/information_manager.php?information_id' Cross-Site Scripting webapps, 2012-04-04
  • EDB-37043 osCMax 2.5 - '/admin/stats_customers.php?sorted' Cross-Site Scripting webapps, 2012-04-04
  • EDB-37042 osCMax 2.5 - '/admin/stats_monthly_sales.php?status' Cross-Site Scripting webapps, 2012-04-04
  • EDB-37041 osCMax 2.5 - '/admin/stats_products_purchased.php' Multiple Cross-Site Scripting Vulnerabilities webapps, 2012-04-04
  • EDB-37040 osCMax 2.5 - '/admin/xsell.php?search' Cross-Site Scripting webapps, 2012-04-04
  • EDB-37039 osCMax 2.5 - '/admin/htaccess.php' Multiple Cross-Site Scripting Vulnerabilities webapps, 2012-04-04
  • EDB-37038 osCMax 2.5 - '/admin/login.php?Username' Cross-Site Scripting webapps, 2012-04-04
  • htbridge.com https://www.htbridge.com/advisory/HTB23081 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
NVD 2.0 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N

Classification

Weakness
  • CWE-79 Improper Neutralization of Input During Web Page Generation

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.