Unscored severity · published Aug 12, 2012
CVE-2012-2584
Multiple cross-site scripting (XSS) vulnerabilities in Alt-N MDaemon Free 12.5.4 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1)…
–
CVSS
3.2%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in Alt-N MDaemon Free 12.5.4 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) the Cascading Style Sheets (CSS) expression property in conjunction with a CSS comment within the STYLE attribute of an IMG element, (2) the CSS expression property in conjunction with multiple CSS comments within the STYLE attribute of an arbitrary element, or (3) an innerHTML attribute within an XML document.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.2% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MD
Mdaemon · Altn
12.5.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-2584
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-2584
Exploit
http://www.exploit-db.com/exploits/20357/
Exploit
http://www.securityfocus.com/bid/54885
www.securitytracker.com
http://www.securitytracker.com/id?1027409
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/77543
More from Mdaemon
8.8
CVE-2021-27182
An issue was discovered in MDaemon before 20.0.4
8.8
CVE-2021-27181
An issue was discovered in MDaemon before 20.0.4
7.2
CVE-2021-27183
An issue was discovered in MDaemon before 20.0.4
6.1
CVE-2021-27180
An issue was discovered in MDaemon before 20.0.4
6.1
CVE-2019-8983
MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 1 of 2)