SonicALERT
Search

Sonicwall Signatures

 

Go to All Categories list.


  Roundcube Webmail XML Attachment XSS

Category: SMTP      

An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML attachment because text/xml is among the allowed types for a preview.

References
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2028


Relevant Information