NVD

Id
48847  
Name
CVE-2009-1578  
Description
Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.4.18 and NaSMail before 1.7 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) certain encrypted strings in e-mail headers, related to contrib/decrypt_headers.php; (2) PHP_SELF; and (3) the query string (aka QUERY_STRING).  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-05-14  
Modified Date
2010-08-21  
Seq
2009-1578  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
246801 48847 CVE-2009-1578 http://download.gna.org/nasmail/nasmail-1.7.zip  View
246802 48847 CVE-2009-1578 APPLE-SA-2010-06-15-1  View
246803 48847 CVE-2009-1578 oval:org.mitre.oval:def:11624  View
246804 48847 CVE-2009-1578 http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/contrib/decrypt_headers.php?r1=13672&r2=13671&pathrev=13672  View
246805 48847 CVE-2009-1578 http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog  View
246806 48847 CVE-2009-1578 http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/functions/global.php?r1=13670&r2=13669&pathrev=13670  View
246807 48847 CVE-2009-1578 http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13670  View
246808 48847 CVE-2009-1578 http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13672  View
246809 48847 CVE-2009-1578 http://support.apple.com/kb/HT4188  View
246810 48847 CVE-2009-1578 DSA-1802  View
246811 48847 CVE-2009-1578 MDVSA-2009:110  View
246812 48847 CVE-2009-1578 RHSA-2009:1066  View
246813 48847 CVE-2009-1578 34916  View
246814 48847 CVE-2009-1578 http://www.squirrelmail.org/security/issue/2009-05-08  View
246815 48847 CVE-2009-1578 http://www.squirrelmail.org/security/issue/2009-05-09  View
246816 48847 CVE-2009-1578 ADV-2009-1296  View
246817 48847 CVE-2009-1578 ADV-2009-3315  View
246818 48847 CVE-2009-1578 ADV-2010-1481  View
246819 48847 CVE-2009-1578 squirrelmail-phpself-xss(50459)  View
246820 48847 CVE-2009-1578 squirrelmail-decryptheaders-xss(50460)  View
246821 48847 CVE-2009-1578 https://bugzilla.redhat.com/show_bug.cgi?id=500363  View
246822 48847 CVE-2009-1578 https://gna.org/forum/forum.php?forum_id=2146  View
246823 48847 CVE-2009-1578 FEDORA-2009-4870  View
246824 48847 CVE-2009-1578 FEDORA-2009-4875  View
246825 48847 CVE-2009-1578 FEDORA-2009-4880  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40546 JVNDB-2009-001552 SquirrelMail におけるクロスサイトスクリプティングの脆弱性 SquirrelMail には、電子メールヘッダ内の特定の暗号化文字列や、PHP_SELF;、クエリ文字列の処理に関連したクロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-1578 39009 CVE-2009-1578 48847 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001552.html 2009-05-08 2010-07-06 View