XSS in E-Supportportal Escon Supportportal
CVE-2012-2590
Multiple cross-site scripting (XSS) vulnerabilities in ESCON SupportPortal Professional Edition 3.0 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a SCRIPT element, (2) a crafted SRC attribute of an IFRAME element, (3) a crafted CONTENT attribute of an HTTP-EQUIV="Set-Cookie" META element, or (4) an innerHTML attribute within an XML document.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.013 (67.9th percentile) — read the EPSS interpretation.
Affected products
- E-supportportal Escon_supportportal — versions 3.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cret@cert.org (Exploit, exploit, x_refsource_EXPLOIT-DB)