CVE-2012-1213 Cross-site scripting (XSS) vulnerability in zimbra/h/calendar in Zimbra Web Client in Zimbra Collaboration Suite (ZCS) 6.x before 6.0.15 and 7.x before 7.1.3 allows remote attackers to inject arbitrar...
MediumCVSS 4.3
EPSS 1.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in zimbra/h/calendar in Zimbra Web Client in Zimbra Collaboration Suite (ZCS) 6.x before 6.0.15 and 7.x before 7.1.3 allows remote attackers to inject arbitrary web script or HTML via the view parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zimbra | All versions | No fix listed |
References
- packetstormsecurity.org exploit
- st2tea.blogspot.com exploit
- 51974 exploit vdb-entry
- bugzilla.zimbra.com
- zimbra-view-xss(73168) vdb-entry