NVD

Id
58935  
Name
CVE-2006-0195  
Description
Interpretation conflict in the MagicHTML filter in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via style sheet specifiers with invalid (1) "/*" and "*/" comments, or (2) a newline in a "url" specifier, which is processed by certain web browsers including Internet Explorer.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-02-23  
Modified Date
2011-03-07  
Seq
2006-0195  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
302618 58935 CVE-2006-0195 20060501-01-U  View
302619 58935 CVE-2006-0195 oval:org.mitre.oval:def:9548  View
302620 58935 CVE-2006-0195 1015662  View
302621 58935 CVE-2006-0195 DSA-988  View
302622 58935 CVE-2006-0195 GLSA-200603-09  View
302623 58935 CVE-2006-0195 MDKSA-2006:049  View
302624 58935 CVE-2006-0195 SUSE-SR:2006:005  View
302625 58935 CVE-2006-0195 FEDORA-2006-133  View
302626 58935 CVE-2006-0195 RHSA-2006:0283  View
302627 58935 CVE-2006-0195 16756  View
302628 58935 CVE-2006-0195 http://www.squirrelmail.org/security/issue/2006-02-10  View
302629 58935 CVE-2006-0195 ADV-2006-0689  View
302630 58935 CVE-2006-0195 squirrelmail-magichtml-xss(24848)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58055 JVNDB-2006-000251 SquirrelMail におけるクロスサイトスクリプティングの脆弱性 SquirrelMail Project により提供されている、ウェブメール SquirrelMail は、HTML メールに対するエスケープ処理が不十分なため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-0195 16297 CVE-2006-0195 58935 4.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000251.html 2006-05-01 2007-04-01 View