EDB-20549
functionalRoundcube Webmail 0.8.0 - Persistent Cross-Site Scripting
view exploit source exploit_dbverifiedtype webappsauthor Shai rodpublished 2012-08-16catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2012-4668US | medium4.3 | Exploit | ||
Cross-site scripting (XSS) vulnerability in Roundcube Webmail 0.8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the signature in an email. | ||||
| CVE-2012-3508US | medium4.3 | Exploit | ||
Cross-site scripting (XSS) vulnerability in program/lib/washtml.php in Roundcube Webmail 0.8.0 allows remote attackers to inject arbitrary web script or HTML by using "javascript:"… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan