CVEvulnerability
CVE-2012-1213
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-02-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in zimbra/h/calendar in Zimbra Web Client in Zimbra Collaboration Suite (ZCS) 6.x before 6.0.15 and 7.x before 7.1.3 allows remote attackers to inject arbitrary web script or HTML via the view parameter.
Affected configurations
• zimbra zimbra
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://packetstormsecurity.org/files/109710/Zimbra-Cross-Site-Scripting.html Exploit
- http://st2tea.blogspot.com/2012/02/zimbra-cross-site-scripting.html Exploit
- http://www.securityfocus.com/bid/51974 Exploit
- https://bugzilla.zimbra.com/show_bug.cgi?id=63849 bugzilla.zimbra.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73168 exchange.xforce.ibmcloud.com
- http://packetstormsecurity.org/files/109710/Zimbra-Cross-Site-Scripting.html Exploit
- http://st2tea.blogspot.com/2012/02/zimbra-cross-site-scripting.html Exploit
- http://www.securityfocus.com/bid/51974 Exploit
- https://bugzilla.zimbra.com/show_bug.cgi?id=63849 bugzilla.zimbra.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73168 exchange.xforce.ibmcloud.com