CVE

Id
11310  
CVE No.
CVE-2005-0104  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to inject arbitrary web script or HTML via certain integer variables.  
Phase
Assigned (20050118)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
80277 11310 CVE-2005-0104 BUGTRAQ:20050129 SquirrelMail Security Advisory  View
80278 11310 CVE-2005-0104 URL:http://marc.info/?l=bugtraq&m=110702772714662&w=2  View
80279 11310 CVE-2005-0104 CONFIRM:http://www.squirrelmail.org/security/issue/2005-01-20  View
80280 11310 CVE-2005-0104 APPLE:APPLE-SA-2005-03-21  View
80281 11310 CVE-2005-0104 URL:http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html  View
80282 11310 CVE-2005-0104 DEBIAN:DSA-662  View
80283 11310 CVE-2005-0104 URL:http://www.debian.org/security/2005/dsa-662  View
80284 11310 CVE-2005-0104 GENTOO:GLSA-200501-39  View
80285 11310 CVE-2005-0104 URL:http://www.gentoo.org/security/en/glsa/glsa-200501-39.xml  View
80286 11310 CVE-2005-0104 REDHAT:RHSA-2005:099  View
80287 11310 CVE-2005-0104 URL:http://www.redhat.com/support/errata/RHSA-2005-099.html  View
80288 11310 CVE-2005-0104 REDHAT:RHSA-2005:135  View
80289 11310 CVE-2005-0104 URL:http://www.redhat.com/support/errata/RHSA-2005-135.html  View
80290 11310 CVE-2005-0104 OVAL:oval:org.mitre.oval:def:10568  View
80291 11310 CVE-2005-0104 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10568  View
80292 11310 CVE-2005-0104 SECUNIA:13962  View
80293 11310 CVE-2005-0104 URL:http://secunia.com/advisories/13962/  View
80294 11310 CVE-2005-0104 SECUNIA:14096  View
80295 11310 CVE-2005-0104 URL:http://secunia.com/advisories/14096  View
80296 11310 CVE-2005-0104 XF:squirrelmail-webmailphp-xss(19036)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62627 JVNDB-2005-000867 Perl モジュール Net::SSLeay.pm の entropy ソースの扱いに関する脆弱性 Perl モジュール Net::SSLeay.pm には、entropy ソースを指定する EGD_PATH 環境変数が定義されていない際に、/tmp/entropy ファイルを entropy ソースとして使用してしまう問題が存在します。 CVE-2005-0106 11310 4.6 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000867.html  View