system
Describe <CVE-2012-2638>.
user
What is <CVE-2012-2638>?
assistant
Cross-site scripting (XSS) vulnerability in SmallPICT.cgi in SmallPICT before 2.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors..