CVE-2002-1131

Опубликовано: 04 окт. 2002

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via (1) addressbook.php, (2) options.php, (3) search.php, or (4) help.php.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2002-09/0246.html
Exploit
Vendor Advisory
http://sourceforge.net/project/shownotes.php?group_id=311&release_id=110774
http://www.debian.org/security/2002/dsa-191
http://www.iss.net/security_center/static/10145.php
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2002-204.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/5763
Exploit
Patch
Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-09/0246.html
Exploit
Vendor Advisory
http://sourceforge.net/project/shownotes.php?group_id=311&release_id=110774
http://www.debian.org/security/2002/dsa-191
http://www.iss.net/security_center/static/10145.php
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2002-204.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/5763
Exploit
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*

Версия до 1.2.7 (включая)

EPSS

Процентиль: 84%

0.02453

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2002-1131

redhat

почти 23 года назад

CVE-2002-1131

debian

больше 22 лет назад

Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier ...

GHSA-pjvq-p3hx-m7q2

github

около 3 лет назад

EPSS

Процентиль: 84%

0.02453

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other