Lucene search

K
prionPRIOn knowledge basePRION:CVE-2015-8793
HistoryJan 29, 2016 - 7:59 p.m.

Cross site scripting

2016-01-2919:59:00
PRIOn knowledge base
www.prio-n.com
2

5.9 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.7%

Cross-site scripting (XSS) vulnerability in program/include/rcmail.php in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the _mbox parameter in a mail task to the default URL, a different vulnerability than CVE-2011-2937.

CPENameOperatorVersion
webmaileq1.1.0
webmaileq1.1.1
webmaille1.0.5

5.9 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.7%