Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2011-2023

Опубликовано: 10 июл. 2011
Источник: redhat
CVSS2: 4.3
EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in functions/mime.php in SquirrelMail before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via a crafted STYLE element in an e-mail message.

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-79
https://bugzilla.redhat.com/show_bug.cgi?id=720695SquirrelMail: XSS in <style> tag handling

EPSS

Процентиль: 74%
0.00838
Низкий

4.3 Medium

CVSS2

Связанные уязвимости

ubuntu
около 14 лет назад

Cross-site scripting (XSS) vulnerability in functions/mime.php in SquirrelMail before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via a crafted STYLE element in an e-mail message.

nvd
около 14 лет назад

Cross-site scripting (XSS) vulnerability in functions/mime.php in SquirrelMail before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via a crafted STYLE element in an e-mail message.

debian
около 14 лет назад

Cross-site scripting (XSS) vulnerability in functions/mime.php in Squi ...

github
больше 3 лет назад

Cross-site scripting (XSS) vulnerability in functions/mime.php in SquirrelMail before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via a crafted STYLE element in an e-mail message.

oracle-oval
больше 13 лет назад

ELSA-2012-0103: squirrelmail security update (MODERATE)

EPSS

Процентиль: 74%
0.00838
Низкий

4.3 Medium

CVSS2