NVD

Id
58928  
Name
CVE-2006-0188  
Description
webmail.php in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary web pages into the right frame via a URL in the right_frame parameter. NOTE: this has been called a cross-site scripting (XSS) issue, but it is different than what is normally identified as XSS.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-02-23  
Modified Date
2011-03-07  
Seq
2006-0188  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
302571 58928 CVE-2006-0188 20060501-01-U  View
302572 58928 CVE-2006-0188 oval:org.mitre.oval:def:10419  View
302573 58928 CVE-2006-0188 1015662  View
302574 58928 CVE-2006-0188 DSA-988  View
302575 58928 CVE-2006-0188 GLSA-200603-09  View
302576 58928 CVE-2006-0188 MDKSA-2006:049  View
302577 58928 CVE-2006-0188 SUSE-SR:2006:005  View
302578 58928 CVE-2006-0188 FEDORA-2006-133  View
302579 58928 CVE-2006-0188 RHSA-2006:0283  View
302580 58928 CVE-2006-0188 16756  View
302581 58928 CVE-2006-0188 http://www.squirrelmail.org/security/issue/2006-02-01  View
302582 58928 CVE-2006-0188 ADV-2006-0689  View
302583 58928 CVE-2006-0188 squirrelmail-webmail-xss(24847)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58054 JVNDB-2006-000250 SquirrelMail の webmail.php における右フレームに任意の Web ページを挿入される脆弱性 SquirrelMail には webmail.php の right_frame パラメータのサニタイズ処理が不適切であるため、右フレームのコンテンツを任意のホスト上のコンテンツで偽装可能である脆弱性が存在します。 CVE-2006-0188 16290 CVE-2006-0188 58928 4.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000250.html 2006-05-01 2007-04-01 View