EUVD-2012-4003

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in SocketMail Pro 2.2.9 allows remote attackers to inject arbitrary web script or HTML via the subject of an email...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in home/secretqtn.php in SocketMail Pro 2.2.9 allows remote attackers to hijack the authentication of arbitrary users for requests that change user security questions and answers via an upd action...

CVE-2012-4058

CVE-2012-4058 affects SocketMail Pro 2.2.9 and is a cross-site scripting (XSS) vulnerability that lets remote attackers inject arbitrary web script or HTML via the subject of an email. The referenced sources corroborate the description but do not provide additional exploitation details in the con...