18 lines
731 B
Markdown
18 lines
731 B
Markdown
|
### [CVE-2012-3507](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3507)
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
### Description
|
||
|
|
|
||
|
|
Cross-site scripting (XSS) vulnerability in program/steps/mail/func.inc in RoundCube Webmail before 0.8.0, when using the Larry skin, allows remote attackers to inject arbitrary web script or HTML via the email message subject.
|
||
|
|
|
||
|
|
### POC
|
||
|
|
|
||
|
|
#### Reference
|
||
|
|
- http://sourceforge.net/projects/roundcubemail/files/roundcubemail/0.8.0/
|
||
|
|
|
||
|
|
#### Github
|
||
|
|
No PoCs found on GitHub currently.
|
||
|
|
|