CVE-2012-2588
Beschrijving NL
Meerdere cross-site scripting (XSS) kwetsbaarheden in MailEnable Enterprise 6.5 stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de (1) From, (2) To of (3) Subject header of (4) body in een SMTP-e-mailbericht.
Origineel (Engels) tonen
Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Enterprise 6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) From, (2) To, or (3) Subject header or (4) body in an SMTP e-mail message.