Description

Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.7, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via vectors involving an embedded image attachment.

Remediation

References

CVE-2012-1253

Related Vulnerabilities

MySQL Other Vulnerability (CVE-2002-1374)

WordPress Plugin WhyDoWork AdSense Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities (1.2)

Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9517)

b2evolution Other Vulnerability (CVE-2007-2681)

Jboss EAP CVE-2012-5626 Vulnerability (CVE-2012-5626)

Severity

Low

Classification

CVE-2012-1253 CWE-707

Tags

Missing Update Known Vulnerabilities