CVE-2012-2588 Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Enterprise 6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) From, (2) To, or (3) Subject header or (4) bo...
MediumCVSS 4.3
EPSS 2.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Enterprise 6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) From, (2) To, or (3) Subject header or (4) body in an SMTP e-mail message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| MailEnable | = 6.5 | No fix listed |
References
- 84589 vdb-entry
- 50205 third-party-advisory
- 20351 exploit
- 54900 exploit vdb-entry
- mailenable-multiple-fields-xss(77547) vdb-entry