CVE-2012-2590

CVE-2012-2590 affects ESCON SupportPortal Pro 3.0. The vulnerability is multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via an e-mail message body. Exploitation vectors include (1) a SCRIPT element, (2) crafted SRC on an IFRAME, (3) cra...

CVE-2012-2590: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ESCON SupportPortal Professional Edition 3.0 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with 1 a SCRIPT element, 2 a crafted SRC attribute of an IFRAME element, 3 a crafted CONTENT attribute of an...

PT-2012-4122

Name of the Vulnerable Software and Affected Versions ESCON SupportPortal Professional Edition version 3.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via an e-mail message body using various methods, including a SCRIPT element, a crafted SRC attribute of ...