CVE-2012-2591

Multiple cross-site scripting (XSS) vulnerabilities in EmailArchitect Email Server 10.0 and 10.0.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) From or (2) Date field in an email.

CVSS v2.0 NVD

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

2.01% chance of exploitation in the next 30 days, 81st percentile

Published

2014-06-20

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/20349

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/20349

Security advisories

• http://www.securityfocus.com/bid/54896

References

• CVE Record
• NVD entry