CVE-2012-3508 in Webmail

Sumário (Inglês)

Cross-site scripting (XSS) vulnerability in program/lib/washtml.php in Roundcube Webmail 0.8.0 allows remote attackers to inject arbitrary web script or HTML by using "javascript:" in an href attribute in the body of an HTML-formatted email.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

14/06/2012

Divulgação

25/08/2012

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
61797	Roundcube Webmail washtml.php Script de Site Cruzado	79	Prova de conceito	Correção oficial	CVE-2012-3508

Fontes

• MITRE
• NVD
• CVE Details