CVE-2013-3648: XSS
Published Jun 28, 2013
·Updated
Cross-site scripting (XSS) vulnerability in KENT-WEB POST-MAIL before 6.7, when Internet Explorer 7 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an unspecified form field.
Affected Software
2 affected components
KENT-WEB POST-MAIL<=6.62
Microsoft Internet Explorer<=7
Event History
Jun 28, 2013
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-3648?
CVE-2013-3648 has a moderate severity level due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2013-3648?
To fix CVE-2013-3648, upgrade to KENT-WEB POST-MAIL version 6.7 or later.
3
What software is affected by CVE-2013-3648?
CVE-2013-3648 affects KENT-WEB POST-MAIL versions prior to 6.7 when used with Internet Explorer 7 or earlier.
4
What types of vulnerabilities are associated with CVE-2013-3648?
CVE-2013-3648 is associated with cross-site scripting (XSS) vulnerabilities that allow script injection.
5
Are there any workarounds for CVE-2013-3648?
Disabling or not using Internet Explorer 7 or earlier can serve as a temporary workaround for CVE-2013-3648.