CVE-2012-3507 in Webmail
摘要 (英语)
Cross-site scripting (XSS) vulnerability in program/steps/mail/func.inc in RoundCube Webmail before 0.8.0, when using the Larry skin, allows remote attackers to inject arbitrary web script or HTML via the email message subject.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
预定
2012-06-14
披露
2012-08-25
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 61796 | RoundCube Webmail 跨网站脚本 | 79 | 未定义 | 官方修复 | CVE-2012-3507 |