CVE-2006-0195

Опубликовано: 24 фев. 2006

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Interpretation conflict in the MagicHTML filter in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via style sheet specifiers with invalid (1) "/" and "/" comments, or (2) a newline in a "url" specifier, which is processed by certain web browsers including Internet Explorer.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:squirrelmail:squirrelmail:1.4:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_r3:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_rc1:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.4.3a:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.4.4:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.4.4_rc1:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.4.5:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.4.6_rc1:*:*:*:*:*:*:*

cpe:2.3:a:squirrelmail:squirrelmail:1.4_rc1:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.02742

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2006-0195

ubuntu

почти 20 лет назад

Interpretation conflict in the MagicHTML filter in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via style sheet specifiers with invalid (1) "/*" and "*/" comments, or (2) a newline in a "url" specifier, which is processed by certain web browsers including Internet Explorer.

CVE-2006-0195

redhat

почти 20 лет назад

Interpretation conflict in the MagicHTML filter in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via style sheet specifiers with invalid (1) "/*" and "*/" comments, or (2) a newline in a "url" specifier, which is processed by certain web browsers including Internet Explorer.

CVE-2006-0195

debian

почти 20 лет назад

Interpretation conflict in the MagicHTML filter in SquirrelMail 1.4.0 ...

GHSA-pm99-m8ww-5fw3

github

почти 4 года назад

Interpretation conflict in the MagicHTML filter in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via style sheet specifiers with invalid (1) "/*" and "*/" comments, or (2) a newline in a "url" specifier, which is processed by certain web browsers including Internet Explorer.

EPSS

Процентиль: 86%

0.02742

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other