CVE-2012-0389

Published Jan 24, 2012 CVSS 2.0 · 4.3 Medium EPSS 8.1% KEV · Not listed
Description
Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium 4.26 and earlier, 5.x before 5.53, and 6.x before 6.03 allows remote attackers to inject arbitrary web script or HTML via the Username parameter.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 6:23 PM
Reserved
Jan 4, 2012, 12:00 AM
Status
Modified
Published
Jan 24, 2012, 6:55 PM
Modified
Jun 16, 2026, 11:37 PM