Cloudanix VulnDB

CVE-2004-0519

None

CVSS

—

EPSS

22.5%

Published

Aug 18, 2004

CISA due date

—

The record

Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via multiple attack vectors, including the mailbox parameter in compose.php.

Affected packages

Ecosystem Package Introduced Fixed
Debian:3.0 squirrelmail 0 1:1.2.6-1.4
Red Hat:enterprise_linux:3::as squirrelmail 0 0:1.4.3-0.e3.1
Red Hat:enterprise_linux:3::desktop squirrelmail 0 0:1.4.3-0.e3.1
Red Hat:enterprise_linux:3::es squirrelmail 0 0:1.4.3-0.e3.1
Red Hat:enterprise_linux:3::ws squirrelmail 0 0:1.4.3-0.e3.1

Related vulnerabilities