CVE-2012-2591

Multiple cross-site scripting (XSS) vulnerabilities in EmailArchitect Email Server 10.0 and 10.0.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) From or (2) Date field in an email.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

2.01% chance of exploitation in the next 30 days, 79th percentile

Published

2014-06-20

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/20349

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/20349

References

• CVE Record
• NVD entry

Related

• CVE-2012-2590
• CVE-2012-2592
• CVE-2012-2588
• CVE-2012-2593
• CVE-2012-2587
• CVE-2012-2601