FICHE CVE

CVE-2012-0389

Publiée le 2012-01-24 · Dernière modification le 2026-06-16

Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium 4.26 and earlier, 5.x before 5.53, and 6.x before 6.03 allows remote attackers to inject arbitrary web script or HTML via the Username parameter.

CVSS 2.04.3 MOYENNE

Type de faiblesse

Cross-site scripting (XSS) · CWE-79