Lucene search

CertccCVELIST:CVE-2012-2590

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-2590

2022-10-0316:15:36

certcc

www.cve.org

cross-site scripting

escon supportportal

remote attackers

web script

html

e-mail body

iframe element

http-equiv

set-cookie

xml document

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.9%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in ESCON SupportPortal Professional Edition 3.0 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a SCRIPT element, (2) a crafted SRC attribute of an IFRAME element, (3) a crafted CONTENT attribute of an HTTP-EQUIV=“Set-Cookie” META element, or (4) an innerHTML attribute within an XML document.

References

www.exploit-db.com/exploits/20350/