CVE-2012-3232: Cross-site scripting (XSS) vulnerability in search.php in web@all 2.0, as downloaded before May 30, 2012, a...

Security readout for executives and security teams

CVE-2012-3232 is a cross-site scripting flaw in web@all 2.0. If an exposed site uses a vulnerable pre-May 30, 2012 download, an attacker could make malicious script or HTML run in a visitor’s browser through the search function. Exposure is most likely on public web@all 2.0 sites still running the vulnerable search.php code from before May 30, 2012. Evidence is incomplete because the bundle lists affected vendor and product fields as n/a. Low-to-moderate operational priority unless web@all 2.0 remains publicly exposed. The age of the CVE reduces likelihood in modern estates, but any surviving unsupported web application should be removed or remediated quickly. Mitigation focus: Inventory any web@all 2.0 deployments and confirm download or build date.; Check the HTBridge and vendor guidance for corrected packages or official remediation.; Restrict or remove exposed search.php if remediation cannot be verified..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.