CVE

Id
13975  
CVE No.
CVE-2005-2769  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 and possibly other versions allows remote attackers to inject arbitrary web script or HTML via an HTML e-mail containing tags with strings that contain ">" or other special characters, which is not properly sanitized by SqWebMail.  
Phase
Assigned (20050902)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
102937 13975 CVE-2005-2769 BUGTRAQ:20050829 Secunia Research: SqWebMail HTML Emails Script Insertion  View
102938 13975 CVE-2005-2769 URL:http://marc.info/?l=bugtraq&m=112534112715638&w=2  View
102939 13975 CVE-2005-2769 FULLDISC:[Full-disclosure] Secunia Research: SqWebMail HTML Emails Script Insertion Vulnerability  View
102940 13975 CVE-2005-2769 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/036622.html  View
102941 13975 CVE-2005-2769 MISC:http://secunia.com/secunia_research/2005-39/advisory/  View
102942 13975 CVE-2005-2769 UBUNTU:USN-201-1  View
102943 13975 CVE-2005-2769 URL:http://www.ubuntu.com/usn/usn-201-1  View
102944 13975 CVE-2005-2769 BID:14676  View
102945 13975 CVE-2005-2769 URL:http://www.securityfocus.com/bid/14676  View
102946 13975 CVE-2005-2769 SECUNIA:16600  View
102947 13975 CVE-2005-2769 URL:http://secunia.com/advisories/16600/  View
102948 13975 CVE-2005-2769 SECUNIA:17156  View
102949 13975 CVE-2005-2769 URL:http://secunia.com/advisories/17156  View
102950 13975 CVE-2005-2769 XF:sqwebmail-html-xss(22043)  View

Related JVN