CVE-2026-32850 in MailEnable
요약 (영어)
MailEnable versions prior to 10.55 contain a reflected cross-site scripting vulnerability in the webmail interface that allows remote attackers to execute arbitrary JavaScript in a victim's browser by crafting a malicious URL. Attackers can inject malicious code through the SelectedIndex parameter in the ManageShares.aspx form, which is not properly sanitized before being embedded into dynamically generated JavaScript.
책임이 있는
VulnCheck
예약하다
2026. 03. 16.
공개
2026. 03. 23.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 352613 | MailEnable Webmail ManageShares.aspx 크로스 사이트 스크립팅 | 79 | 정의되지 않음 | 공식 수정 | CVE-2026-32850 |