Lucene search
CertccCVELIST:CVE-2012-2578HistorySep 19, 2012 - 10:00 a.m.
CVE-2012-2578
2012-09-1910:00:00
certcc
www.cve.org
4
smartermail 9.2
cross-site scripting
remote attackers
web script
html
e-mail message body
javascript alert function
fromcharcode method
script element
cascading style sheets
css expression property
innerhtml attribute
xml document
Multiple cross-site scripting (XSS) vulnerabilities in SmarterMail 9.2 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a JavaScript alert function used in conjunction with the fromCharCode method, (2) a SCRIPT element, (3) a Cascading Style Sheets (CSS) expression property in the STYLE attribute of an arbitrary element, or (4) an innerHTML attribute within an XML document.
References
Related
prion
prion
Cross site scripting
2012-09-19 10:57:00
cve
cve
CVE-2012-2578
2012-09-19 10:57:02
exploitdb
exploitdb
smartermail free 9.2 - Persistent Cross-Site Scripting
2012-08-08 00:00:00
nvd
nvd
CVE-2012-2578
2012-09-19 10:57:02