CVE-2012-0389: XSS
Published Jan 24, 2012
·Updated
Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium 4.26 and earlier, 5.x before 5.53, and 6.x before 6.03 allows remote attackers to inject arbitrary web script or HTML via the Username parameter.
Affected Software
159 affected components
MailEnable MailEnable<=4.26
MailEnable MailEnable=1.2
MailEnable MailEnable=1.2a
MailEnable MailEnable=1.5
MailEnable MailEnable=1.6
MailEnable MailEnable=1.7
MailEnable MailEnable=1.17
MailEnable MailEnable=1.18
MailEnable MailEnable=1.19
MailEnable MailEnable=1.51
MailEnable MailEnable=1.52
MailEnable MailEnable=1.53
MailEnable MailEnable=1.54
MailEnable MailEnable=1.70
MailEnable MailEnable=1.71
MailEnable MailEnable=1.72
MailEnable MailEnable=1.73
MailEnable MailEnable=1.74
MailEnable MailEnable=1.75
MailEnable MailEnable=1.76
MailEnable MailEnable=1.77
MailEnable MailEnable=1.78
MailEnable MailEnable=1.79
MailEnable MailEnable=3.0
MailEnable MailEnable=3.01
MailEnable MailEnable=3.02
MailEnable MailEnable=3.03
MailEnable MailEnable=3.04
MailEnable MailEnable=3.5
MailEnable MailEnable=3.6
MailEnable MailEnable=3.10
MailEnable MailEnable=3.11
MailEnable MailEnable=3.12
MailEnable MailEnable=3.13
MailEnable MailEnable=3.14
MailEnable MailEnable=3.51
MailEnable MailEnable=3.52
MailEnable MailEnable=3.52
MailEnable MailEnable=3.53
MailEnable MailEnable=3.61
MailEnable MailEnable=3.62
MailEnable MailEnable=3.63
MailEnable MailEnable=4.0
MailEnable MailEnable=4.1
MailEnable MailEnable=4.01
MailEnable MailEnable=4.11
MailEnable MailEnable=4.12
MailEnable MailEnable=4.13
MailEnable MailEnable=4.14
MailEnable MailEnable=4.15
MailEnable MailEnable=4.16
MailEnable MailEnable=4.17
MailEnable MailEnable=4.22
MailEnable MailEnable=4.23
MailEnable MailEnable=4.24
MailEnable MailEnable=4.25
MailEnable MailEnable<=4.26
MailEnable MailEnable=1.00
MailEnable MailEnable=1.1
MailEnable MailEnable=1.01
MailEnable MailEnable=1.02
MailEnable MailEnable=1.2
MailEnable MailEnable=1.03
MailEnable MailEnable=1.04
MailEnable MailEnable=1.21
MailEnable MailEnable=1.22
MailEnable MailEnable=1.23
MailEnable MailEnable=1.24
MailEnable MailEnable=1.25
MailEnable MailEnable=1.26
MailEnable MailEnable=3.0
MailEnable MailEnable=3.01
MailEnable MailEnable=3.02
MailEnable MailEnable=3.03
MailEnable MailEnable=3.04
MailEnable MailEnable=3.5
MailEnable MailEnable=3.6
MailEnable MailEnable=3.10
MailEnable MailEnable=3.11
MailEnable MailEnable=3.12
MailEnable MailEnable=3.13
MailEnable MailEnable=3.14
MailEnable MailEnable=3.51
MailEnable MailEnable=3.52
MailEnable MailEnable=3.52
MailEnable MailEnable=3.53
MailEnable MailEnable=3.61
MailEnable MailEnable=3.62
MailEnable MailEnable=3.63
MailEnable MailEnable=4.0
MailEnable MailEnable=4.01
MailEnable MailEnable=4.1
MailEnable MailEnable=4.11
MailEnable MailEnable=4.12
MailEnable MailEnable=4.13
MailEnable MailEnable=4.14
MailEnable MailEnable=4.15
MailEnable MailEnable=4.16
MailEnable MailEnable=4.17
MailEnable MailEnable=4.22
MailEnable MailEnable=4.23
MailEnable MailEnable=4.24
MailEnable MailEnable=4.25
MailEnable MailEnable<=4.26
MailEnable MailEnable=4.1
MailEnable MailEnable=4.2
MailEnable MailEnable=4.21
MailEnable MailEnable=4.22
MailEnable MailEnable=4.23
MailEnable MailEnable=4.24
MailEnable MailEnable=4.25
MailEnable MailEnable=5.0
MailEnable MailEnable=5.01
MailEnable MailEnable=5.02
MailEnable MailEnable=5.03
MailEnable MailEnable=5.04
MailEnable MailEnable=5.5
MailEnable MailEnable=5.05
MailEnable MailEnable=5.06
MailEnable MailEnable=5.07
MailEnable MailEnable=5.10
MailEnable MailEnable=5.11
MailEnable MailEnable=5.51
MailEnable MailEnable=5.52
MailEnable MailEnable=5.0
MailEnable MailEnable=5.01
MailEnable MailEnable=5.02
MailEnable MailEnable=5.03
MailEnable MailEnable=5.04
MailEnable MailEnable=5.5
MailEnable MailEnable=5.05
MailEnable MailEnable=5.06
MailEnable MailEnable=5.07
MailEnable MailEnable=5.10
MailEnable MailEnable=5.11
MailEnable MailEnable=5.51
MailEnable MailEnable=5.52
MailEnable MailEnable=5.0
MailEnable MailEnable=5.01
MailEnable MailEnable=5.02
MailEnable MailEnable=5.03
MailEnable MailEnable=5.04
MailEnable MailEnable=5.05
MailEnable MailEnable=5.5
MailEnable MailEnable=5.06
MailEnable MailEnable=5.07
MailEnable MailEnable=5.10
MailEnable MailEnable=5.11
MailEnable MailEnable=5.51
MailEnable MailEnable=5.52
MailEnable MailEnable=6.0
MailEnable MailEnable=6.01
MailEnable MailEnable=6.02
MailEnable MailEnable=6.0
MailEnable MailEnable=6.01
MailEnable MailEnable=6.02
MailEnable MailEnable=6.0
MailEnable MailEnable=6.01
MailEnable MailEnable=6.02
Remediation
Patch Available
Event History
Jan 24, 2012
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-0389?
CVE-2012-0389 has a moderate severity rating due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2012-0389?
To fix CVE-2012-0389, upgrade MailEnable to version 5.53 or later, or 6.03 or later.
3
Which versions of MailEnable are affected by CVE-2012-0389?
CVE-2012-0389 affects MailEnable Professional, Enterprise, and Premium versions 4.26 and earlier, as well as versions 5.x before 5.53 and 6.x before 6.03.
4
What type of vulnerability is CVE-2012-0389?
CVE-2012-0389 is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web scripts or HTML.
5
Can CVE-2012-0389 be exploited remotely?
Yes, CVE-2012-0389 can be exploited remotely by attackers through injection via the Username parameter.