Zimbra 'view' Parameter Cross Site Scripting Vulnerability

CVE-2012-1213Zimbra is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...

CVE-2012-1213

Cross-site scripting XSS vulnerability in zimbra/h/calendar in Zimbra Web Client in Zimbra Collaboration Suite ZCS 6.x before 6.0.15 and 7.x before 7.1.3 allows remote attackers to inject arbitrary web script or HTML via the view parameter...

CVE-2012-1213

The CVE-2012-1213 issue affects Zimbra Collaboration Suite (ZCS) Web Client, specifically the zimbra/h/calendar component, with XSS in versions 6.x prior to 6.0.15 and 7.x prior to 7.1.3. The root cause is improper input handling of the view parameter in the calendar view, allowing remote attacke...

CVE-2012-1213

creationtimestamp| type| source ---|---|--- 2012-02-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36695...