CVE-2012-2590

CVE-2012-2590 affects ESCON SupportPortal Pro 3.0. The vulnerability is multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via an e-mail message body. Exploitation vectors include (1) a SCRIPT element, (2) crafted SRC on an IFRAME, (3) cra...