NVD

Id
45099  
Name
CVE-2012-3507  
Description
Cross-site scripting (XSS) vulnerability in program/steps/mail/func.inc in RoundCube Webmail before 0.8.0, when using the Larry skin, allows remote attackers to inject arbitrary web script or HTML via the email message subject.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-08-25  
Modified Date
2015-08-24  
Seq
2012-3507  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
226253 45099 CVE-2012-3507 http://sourceforge.net/projects/roundcubemail/files/roundcubemail/0.8.0/  View
226254 45099 CVE-2012-3507 http://trac.roundcube.net/ticket/1488519  View
226255 45099 CVE-2012-3507 [oss-security] 20120820 CVE-request: Roundcube XSS issues  View
226256 45099 CVE-2012-3507 [oss-security] 20120820 Re: CVE-request: Roundcube XSS issues  View
226257 45099 CVE-2012-3507 [oss-security] 20120820 Re: CVE-request: Roundcube XSS issues  View
226258 45099 CVE-2012-3507 http://www.securelist.com/en/advisories/50212  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28174 JVNDB-2012-003881 RoundCube Webmail の program/steps/mail/func.inc におけるクロスサイトスクリプティングの脆弱性 RoundCube Webmail の program/steps/mail/func.inc には、Larry スキンを使用する際、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-3507 56745 CVE-2012-3507 45099 2.6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003881.html 2012-06-07 2012-08-28 View