CVE-2012-2588

EPSS 2.4%

Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Enterprise 6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) From, (2) To, or (3) Subject header or (4) body in an SMTP e-mail message.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/20351unverified exploitdbwww.exploit-db.com/exploits/20351unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/84589 http://secunia.com/advisories/50205 https://exchange.xforce.ibmcloud.com/vulnerabilities/77547 http://www.exploit-db.com/exploits/20351 http://www.securityfocus.com/bid/54900