CVEvulnerability
CVE-2012-2588
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-09-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Enterprise 6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) From, (2) To, or (3) Subject header or (4) body in an SMTP e-mail message.
Affected configurations
• mailenable mailenable 6.5
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/84589 osvdb.org
- http://secunia.com/advisories/50205 secunia.com
- http://www.exploit-db.com/exploits/20351 Exploit
- http://www.securityfocus.com/bid/54900 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77547 exchange.xforce.ibmcloud.com
- http://osvdb.org/84589 osvdb.org
- http://secunia.com/advisories/50205 secunia.com
- http://www.exploit-db.com/exploits/20351 Exploit
- http://www.securityfocus.com/bid/54900 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77547 exchange.xforce.ibmcloud.com