NVD

Id
64703  
Name
CVE-2006-6142  
Description
Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 through 1.4.9 allow remote attackers to inject arbitrary web script or HTML via the (1) mailto parameter in (a) webmail.php, the (2) session and (3) delete_draft parameters in (b) compose.php, and (4) unspecified vectors involving "a shortcoming in the magicHTML filter."  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-12-05  
Modified Date
2011-03-07  
Seq
2006-6142  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
337844 64703 CVE-2006-6142 20070201-01-P  View
337845 64703 CVE-2006-6142 http://docs.info.apple.com/article.html?artnum=306172  View
337846 64703 CVE-2006-6142 FEDORA-2007-088  View
337847 64703 CVE-2006-6142 FEDORA-2007-089  View
337848 64703 CVE-2006-6142 APPLE-SA-2007-07-31  View
337849 64703 CVE-2006-6142 oval:org.mitre.oval:def:9988  View
337850 64703 CVE-2006-6142 1017327  View
337851 64703 CVE-2006-6142 http://sourceforge.net/project/shownotes.php?release_id=468482  View
337852 64703 CVE-2006-6142 http://squirrelmail.org/security/issue/2006-12-02  View
337853 64703 CVE-2006-6142 DSA-1241  View
337854 64703 CVE-2006-6142 MDKSA-2006:226  View
337855 64703 CVE-2006-6142 SUSE-SR:2006:029  View
337856 64703 CVE-2006-6142 SUSE-SR:2007:004  View
337857 64703 CVE-2006-6142 RHSA-2007:0022  View
337858 64703 CVE-2006-6142 21414  View
337859 64703 CVE-2006-6142 25159  View
337860 64703 CVE-2006-6142 ADV-2006-4828  View
337861 64703 CVE-2006-6142 ADV-2007-2732  View
337862 64703 CVE-2006-6142 squirrelmail-webmail-compose-xss(30693)  View
337863 64703 CVE-2006-6142 squirrelmail-magichtml-messages-xss(30694)  View
337864 64703 CVE-2006-6142 squirrelmail-mimeheader-xss(30695)  View
337865 64703 CVE-2006-6142 https://issues.rpath.com/browse/RPL-849  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51452 JVNDB-2007-000114 SquirrelMail における複数のクロスサイトスクリプティングの脆弱性 SquirrelMail には、webmail.php の mailto パラメータおよび compose.php の session および delete_draft パラメータの入力値チェックが適切に行われないため、複数クロスサイトスクリプティングの脆弱性が存在します。また magicHTML フィルタにもクロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-6142 22244 CVE-2006-6142 64703 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000114.html 2007-01-31 2007-04-01 View