CVE

Id
59883  
CVE No.
CVE-2012-6640  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Horde Internet Mail Program (IMP) before 5.0.22, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted SVG image attachment, a different vulnerability than CVE-2012-5565.  
Phase
Assigned (20140405)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
606049 59883 CVE-2012-6640 MLIST:[announce] 20120626 IMP H4 (5.0.22) (final)  View
606050 59883 CVE-2012-6640 URL:http://lists.horde.org/archives/announce/2012/000775.html  View
606051 59883 CVE-2012-6640 MLIST:[announce] 20121114 Horde Groupware Webmail Edition 4.0.9 (final)  View
606052 59883 CVE-2012-6640 URL:http://lists.horde.org/archives/announce/2012/000840.html  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30471 JVNDB-2012-006179 Drupal 用 Finder モジュールのオートコンプリート機能におけるクロスサイトスクリプティングの脆弱性 Drupal 用 Finder モジュールのオートコンプリート機能には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-6645 59883 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006179.html  View