CVE-2012-1213 | BDVDB-2026-49258 Detail

Description#

Cross-site scripting (XSS) vulnerability in zimbra/h/calendar in Zimbra Web Client in Zimbra Collaboration Suite (ZCS) 6.x before 6.0.15 and 7.x before 7.1.3 allows remote attackers to inject arbitrary web script or HTML via the view parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/73168
http://packetstormsecurity.org/files/109710/Zimbra-Cross-Site-Scripting.html
http://www.securityfocus.com/bid/51974
https://bugzilla.zimbra.com/show_bug.cgi?id=63849
http://st2tea.blogspot.com/2012/02/zimbra-cross-site-scripting.html

Exploit#

No public exploit known

History#

Version 12012-02-20Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.