medium4.3Public exploit code
CVE-2012-2587
Multiple cross-site scripting (XSS) vulnerabilities in AfterLogic MailSuite Pro 6.3 allow remote attackers to inject arbitrary web script or HTML via an e-mail…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- afterlogic mailsuite pro (VMware Appliance) 6.3 - Persistent Cross-Site Scripting2012-08-08 · webapps · windows · Verified
Impact
Multiple cross-site scripting (XSS) vulnerabilities in AfterLogic MailSuite Pro 6.3 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with a crafted SRC attribute of (1) an IFRAME element or (2) a SCRIPT element.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Afterlogic | Mailsuite Pro | Version 6.3 |