CVE-2012-5315: Multiple cross-site scripting (XSS) vulnerabilities in php ireport 1.0 allow remote attackers to inject arb...

Security readout for executives and security teams

CVE-2012-5315 is a set of cross-site scripting flaws in php ireport 1.0. A remote attacker can inject script or HTML through the message parameter on three named pages. Business risk depends on whether this old application is still deployed and reachable by users. Exposure is likely limited to organizations still running php ireport 1.0, especially if the named PHP pages are reachable over an internal or public web interface. The affected metadata is incomplete, so inventory validation matters. Treat this as a targeted cleanup item, not an emergency, unless php ireport 1.0 is still exposed to real users. The age, missing severity data, and public exploit reference justify quick inventory confirmation and remediation planning. Mitigation focus: Identify whether php ireport 1.0 is deployed anywhere.; Check vendor or project guidance for a fixed release or official workaround.; Restrict access to affected pages if the application must remain online..

Prepared

Jun 27, 2026, 16:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.