CVE-2012-2593 Cross-site scripting (XSS) vulnerability in the administrative interface in Atmail Webmail Server 6.4 allows remote attackers to inject arbitrary web script or HTML via the Date field of an email.
MediumCVSS 6.1
EPSS 6.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the administrative interface in Atmail Webmail Server 6.4 allows remote attackers to inject arbitrary web script or HTML via the Date field of an email.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Atmail Webmail Server | = 6.4 | No fix listed |
| atmail | = 6.4.0 | No fix listed |
References
- www.exploit-db.com exploit third-party-advisory vdb-entry
- www.securityfocus.com third-party-advisory vdb-entry