CVE-2004-0519
- State
- Published
- Severity
- Not scored
- Published
- Jun 3, 2004
- Updated
- Aug 8, 2024
- Reserved
- Jun 2, 2004
Description
Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via multiple attack vectors, including the mailbox parameter in compose.php.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 12289third-party-advisory
- squirrel-composephp-xss(16025)vdb-entry
- 20040430 Re: SquirrelMail Cross Scripting Attacks....mailing-list
- SUSE-SR:2005:019vendor-advisory
- oval:org.mitre.oval:def:1006vdb-entrysignature
- FEDORA-2004-160vendor-advisory
- 11531third-party-advisory
- 11686third-party-advisory
- 11870third-party-advisory
- DSA-535vendor-advisory
- RHSA-2004:240vendor-advisory
- FEDORA-2004-1733vendor-advisory
- GLSA-200405-16vendor-advisory
- oval:org.mitre.oval:def:10274vdb-entrysignature
- 20040429 SquirrelMail Cross Scripting Attacks....mailing-list
- CLA-2004:858vendor-advisory
- 10246vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.