CVE

Id
30989  
CVE No.
CVE-2008-0872  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in SmarterTools SmarterMail Enterprise 4.3 allows remote attackers to inject arbitrary web script or HTML via a STYLE attribute of an element in the Subject field of an e-mail message.  
Phase
Assigned (20080221)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
329858 30989 CVE-2008-0872 BUGTRAQ:20080219 SmarterMail Enterprise 4.3 - malformed mail XSS  View
329859 30989 CVE-2008-0872 URL:http://www.securityfocus.com/archive/1/archive/1/488313/100/0/threaded  View
329860 30989 CVE-2008-0872 MISC:http://es.geocities.com/jplopezy/SmarterMailXSS.txt  View
329861 30989 CVE-2008-0872 BID:27878  View
329862 30989 CVE-2008-0872 URL:http://www.securityfocus.com/bid/27878  View
329863 30989 CVE-2008-0872 SECTRACK:1019461  View
329864 30989 CVE-2008-0872 URL:http://www.securitytracker.com/id?1019461  View
329865 30989 CVE-2008-0872 SECUNIA:29024  View
329866 30989 CVE-2008-0872 URL:http://secunia.com/advisories/29024  View
329867 30989 CVE-2008-0872 SREASON:3686  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45787 JVNDB-2008-001097 SEWB3/PLATFORM におけるサービス運用妨害 (DoS) の脆弱性 SEWB3/PLATFORM には、SEWB3 のメッセージ処理に不備があるために、不正な形式のデータを受信した際に、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2008-0876 30989 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001097.html  View