CVE-2012-2582

Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.13, 3.0.x before 3.0.15, and 3.1.x before 3.1.9, and OTRS ITSM 2.1.x before 2.1.5, 3.0.x before 3.0.6, and 3.1.x before 3.1.6, allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a Cascading Style Sheets (CSS) expression property in the STYLE attribute of an arbitrary element or (2) UTF-7 text in an HTTP-EQUIV="CONTENT-TYPE" META element.

• CWE-79

• http://lists.opensuse.org/opensuse-updates/2012-09/msg00024.html
• http://secunia.com/advisories/50513
• http://www.debian.org/security/2012/dsa-2536
• http://www.kb.cert.org/vuls/id/582879Exploit, US Government Resource
• http://www.otrs.com/en/open-source/community-news/security-advisories/security-advisory-2012-01/Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2012-09/msg00024.html
• http://secunia.com/advisories/50513
• http://www.debian.org/security/2012/dsa-2536
• http://www.kb.cert.org/vuls/id/582879Exploit, US Government Resource
• http://www.otrs.com/en/open-source/community-news/security-advisories/security-advisory-2012-01/Vendor Advisory

Published

Aug 23, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-2575Cross-site scripting (XSS) vulnerability in NetWin SurgeMail…
• CVE-2012-2576SQL injection vulnerability in the LoginServlet page in Sola…
• CVE-2012-2577Multiple cross-site scripting (XSS) vulnerabilities in Solar…
• CVE-2012-2578Multiple cross-site scripting (XSS) vulnerabilities in Smart…
• CVE-2012-2579Multiple cross-site scripting (XSS) vulnerabilities in the W…
• CVE-2012-2580Cross-site scripting (XSS) vulnerability in the Postie plugi…
• CVE-2012-2583Cross-site scripting (XSS) vulnerability in Mini Mail Dashbo…
• CVE-2012-2584Multiple cross-site scripting (XSS) vulnerabilities in Alt-N…
• CVE-2012-2585Multiple cross-site scripting (XSS) vulnerabilities in Manag…
• CVE-2012-2586Multiple cross-site scripting (XSS) vulnerabilities in Mailt…
• CVE-2012-2587Multiple cross-site scripting (XSS) vulnerabilities in After…
• CVE-2012-2588Multiple cross-site scripting (XSS) vulnerabilities in MailE…