CVE-2012-2591

EmailArchitect Email Server <10.0.0.3 - XSS

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in EmailArchitect Email Server 10.0 and 10.0.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) From or (2) Date field in an email.

Exploits (1)

exploitdb WORKING POC VERIFIED
by loneferret · pythonwebappswindows
https://www.exploit-db.com/exploits/20349

References (6)

Core 6
Core References
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/20349
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/54896
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/50203
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/77514
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/84520

Scores

EPSS 0.0567
EPSS Percentile 90.4%

Details

CWE
CWE-79
Status published
Products (2)
emailarchitect/emailarchitect_email_server 10.0
emailarchitect/emailarchitect_email_server 10.0.0.3
Published Jun 20, 2014
Tracked Since Feb 18, 2026