CVE-2005-0104

Опубликовано: 29 янв. 2005

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to inject arbitrary web script or HTML via certain integer variables.

Ссылки

http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html
Patch
Vendor Advisory
http://marc.info/?l=bugtraq&m=110702772714662&w=2
http://secunia.com/advisories/13962/
Patch
Vendor Advisory
http://secunia.com/advisories/14096
Patch
Vendor Advisory
http://www.debian.org/security/2005/dsa-662
Patch
Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200501-39.xml
http://www.redhat.com/support/errata/RHSA-2005-099.html
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-135.html
Patch
Vendor Advisory
http://www.squirrelmail.org/security/issue/2005-01-20
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19036
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10568
http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html
Patch
Vendor Advisory
http://marc.info/?l=bugtraq&m=110702772714662&w=2
http://secunia.com/advisories/13962/
Patch
Vendor Advisory
http://secunia.com/advisories/14096
Patch
Vendor Advisory
http://www.debian.org/security/2005/dsa-662
Patch
Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200501-39.xml
http://www.redhat.com/support/errata/RHSA-2005-099.html
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-135.html
Patch
Vendor Advisory
http://www.squirrelmail.org/security/issue/2005-01-20
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:squirrelmail:squirrelmail:1.0.4:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.0.5:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.9:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.10:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.2.11:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.4:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_rc1:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.4.3a:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.44:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01345

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2005-0104

ubuntu

больше 20 лет назад

Cross-site scripting (XSS) vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to inject arbitrary web script or HTML via certain integer variables.

CVE-2005-0104

redhat

больше 20 лет назад

Cross-site scripting (XSS) vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to inject arbitrary web script or HTML via certain integer variables.

CVE-2005-0104

debian

больше 20 лет назад

Cross-site scripting (XSS) vulnerability in webmail.php in SquirrelMai ...

GHSA-5v6x-7gxg-5hfg

github

больше 3 лет назад

Cross-site scripting (XSS) vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to inject arbitrary web script or HTML via certain integer variables.

EPSS

Процентиль: 79%

0.01345

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other