PT-2012-4120
CVE-2012-2587
·
تاريخ النشر
2012-08-12
·
تاريخ التحديث
2012-08-29
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
AfterLogic MailSuite Pro version 6.3
Description
The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via an e-mail message body. Specifically, this can be achieved with a crafted SRC attribute of either an IFRAME element or a SCRIPT element.
Recommendations
For AfterLogic MailSuite Pro version 6.3, consider disabling the ability to include IFRAME and SCRIPT elements in e-mail message bodies as a temporary workaround until a patch is available. Restrict access to potentially vulnerable e-mail messages to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾