CVE

Id
9464  
CVE No.
CVE-2004-1036  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the decoding of encoded text in certain headers in mime.php for SquirrelMail 1.4.3a and earlier, and 1.5.1-cvs before 23rd October 2004, allows remote attackers to execute arbitrary web script or HTML.  
Phase
Assigned (20041115)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
63580 9464 CVE-2004-1036 BUGTRAQ:20041110 [SquirrelMail Security Advisory] Cross Site Scripting in encoded text  View
63581 9464 CVE-2004-1036 URL:http://marc.info/?l=bugtraq&m=110012133608004&w=2  View
63582 9464 CVE-2004-1036 CONFIRM:http://www.squirrelmail.org/  View
63583 9464 CVE-2004-1036 CONFIRM:http://voxel.dl.sourceforge.net/sourceforge/squirrelmail/sm143a-xss.diff  View
63584 9464 CVE-2004-1036 APPLE:APPLE-SA-2005-01-25  View
63585 9464 CVE-2004-1036 URL:http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html  View
63586 9464 CVE-2004-1036 APPLE:APPLE-SA-2005-03-21  View
63587 9464 CVE-2004-1036 URL:http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html  View
63588 9464 CVE-2004-1036 CONECTIVA:CLA-2004:905  View
63589 9464 CVE-2004-1036 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000905  View
63590 9464 CVE-2004-1036 GENTOO:GLSA-200411-25  View
63591 9464 CVE-2004-1036 URL:http://www.gentoo.org/security/en/glsa/glsa-200411-25.xml  View
63592 9464 CVE-2004-1036 OVAL:oval:org.mitre.oval:def:9592  View
63593 9464 CVE-2004-1036 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9592  View
63594 9464 CVE-2004-1036 XF:squirrelmail-mime-xss(18031)  View

Related JVN