CVE

Id
9067  
CVE No.
CVE-2004-0639  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Squirrelmail 1.2.10 and earlier allow remote attackers to inject arbitrary HTML or script via (1) the $mailer variable in read_body.php, (2) the $senderNames_part variable in mailbox_display.php, and possibly other vectors including (3) the $event_title variable or (4) the $event_text variable.  
Phase
Assigned (20040708)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
58897 9067 CVE-2004-0639 BUGTRAQ:20040530 RS-2004-1: SquirrelMail "Content-Type" XSS vulnerability  View
58898 9067 CVE-2004-0639 URL:http://marc.info/?l=bugtraq&m=108611554415078&w=2  View
58899 9067 CVE-2004-0639 MISC:http://www.rs-labs.com/adv/RS-Labs-Advisory-2004-1.txt  View
58900 9067 CVE-2004-0639 CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=257973  View
58901 9067 CVE-2004-0639 CONECTIVA:CLA-2004:858  View
58902 9067 CVE-2004-0639 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858  View
58903 9067 CVE-2004-0639 DEBIAN:DSA-535  View
58904 9067 CVE-2004-0639 URL:http://www.debian.org/security/2004/dsa-535  View
58905 9067 CVE-2004-0639 BID:10450  View
58906 9067 CVE-2004-0639 URL:http://www.securityfocus.com/bid/10450  View
58907 9067 CVE-2004-0639 XF:squirrelmail-from-header-xss(16285)  View

Related JVN