CVE-2012-2591 – emailarchitect enterprise email server 10.0 - Persistent Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2012-2591

Multiple cross-site scripting (XSS) vulnerabilities in EmailArchitect Email Server 10.0 and 10.0.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) From or (2) Date field in an email. Múltiples vulnerabilidades de XSS en EmailArchitect Email Server 10.0 y 10.0.0.3 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del campo (1) From o (2) Date en un email. EmailArchitect Enterprise Email Server version 10.0 suffers from a stored cross site scripting vulnerability. • https://www.exploit-db.com/exploits/20349 http://osvdb.org/84520 http://packetstormsecurity.org/files/115354/EmailArchitect-Enterprise-Email-Server-10.0-Cross-Site-Scripting.html http://secunia.com/advisories/50203 http://www.exploit-db.com/exploits/20349 http://www.securityfocus.com/bid/54896 https://exchange.xforce.ibmcloud.com/vulnerabilities/77514 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •