CVE-2012-0829

no score yetEPSS 0.9%

Multiple cross-site request forgery (CSRF) vulnerabilities in Mibew Messenger 1.6.4 and earlier allow remote attackers to hijack the authentication of operators for requests that insert cross-site scripting (XSS) sequences via the (1) address or (2) threadid parameters to operator/ban.php; or (3) geolinkparams, (4) title, or (5) chattitle parameters to operator/settings.php.

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2012-02-14
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

mibew:mibew_messenger

References

http://archives.neohapsis.com/archives/bugtraq/2012-01/0178.html
http://secunia.com/advisories/47787
http://www.codseq.it/advisories/mibew_messenger_multiple_xss
http://www.openwall.com/lists/oss-security/2012/02/02/10
http://www.securityfocus.com/bid/51723

Check your stack JSON