Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2005-0075
HistoryFeb 06, 2005 - 5:00 a.m.

CVE-2005-0075

2005-02-0605:00:00
mitre
web.nvd.nist.gov
69
squirrelmail
code injection
security vulnerability
cve-2005-0075
nvd

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.3

Confidence

Low

EPSS

0.006

Percentile

78.7%

JSON

prefs.php in SquirrelMail before 1.4.4, with register_globals enabled, allows remote attackers to inject local code into the SquirrelMail code via custom preference handlers.

Affected configurations

Nvd
Node
squirrelmailsquirrelmailMatch1.0.4
OR
squirrelmailsquirrelmailMatch1.0.5
OR
squirrelmailsquirrelmailMatch1.2.0
OR
squirrelmailsquirrelmailMatch1.2.1
OR
squirrelmailsquirrelmailMatch1.2.2
OR
squirrelmailsquirrelmailMatch1.2.3
OR
squirrelmailsquirrelmailMatch1.2.4
OR
squirrelmailsquirrelmailMatch1.2.5
OR
squirrelmailsquirrelmailMatch1.2.6
OR
squirrelmailsquirrelmailMatch1.2.7
OR
squirrelmailsquirrelmailMatch1.2.8
OR
squirrelmailsquirrelmailMatch1.2.9
OR
squirrelmailsquirrelmailMatch1.2.10
OR
squirrelmailsquirrelmailMatch1.2.11
OR
squirrelmailsquirrelmailMatch1.4
OR
squirrelmailsquirrelmailMatch1.4.0
OR
squirrelmailsquirrelmailMatch1.4.1
OR
squirrelmailsquirrelmailMatch1.4.2
OR
squirrelmailsquirrelmailMatch1.4.3
OR
squirrelmailsquirrelmailMatch1.4.3a
VendorProductVersionCPE
squirrelmailsquirrelmail1.0.4cpe:2.3:a:squirrelmail:squirrelmail:1.0.4:*:*:*:*:*:*:*
squirrelmailsquirrelmail1.0.5cpe:2.3:a:squirrelmail:squirrelmail:1.0.5:*:*:*:*:*:*:*
squirrelmailsquirrelmail1.2.0cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*
squirrelmailsquirrelmail1.2.1cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*
squirrelmailsquirrelmail1.2.2cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*
squirrelmailsquirrelmail1.2.3cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*
squirrelmailsquirrelmail1.2.4cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*
squirrelmailsquirrelmail1.2.5cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*
squirrelmailsquirrelmail1.2.6cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*
squirrelmailsquirrelmail1.2.7cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*
Rows per page:
1-10 of 201

Related

cvelist 1
nvd 1
veracode 1
ubuntucve 1
gentoo 1
nessus 5
openvas 5
redhat 2
freebsd 1
cvelist
cvelist
CVE-2005-0075
2005-02-06 05:00:00
nvd
nvd
CVE-2005-0075
2005-01-29 05:00:00
veracode
veracode
Code Injection
2019-07-09 06:36:28
ubuntucve
ubuntucve
CVE-2005-0075
2005-01-29 00:00:00
gentoo
gentoo
SquirrelMail: Multiple vulnerabilities
2005-01-28 00:00:00
nessus
nessus
GLSA-200501-39 : SquirrelMail: Multiple vulnerabilities
2005-02-14 00:00:00
SquirrelMail < 1.4.4 Multiple Vulnerabilities
2005-01-24 00:00:00
RHEL 4 : squirrelmail (RHSA-2005:099)
2005-02-22 00:00:00
openvas
openvas
SquirrelMail < 1.4.4 XSS Vulnerabilities
2005-11-03 00:00:00
Gentoo Security Advisory GLSA 200501-39 (SquirrelMail)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200501-39 (SquirrelMail)
2008-09-24 00:00:00
redhat
redhat
(RHSA-2005:135) squirrelmail security update
2005-02-10 00:00:00
(RHSA-2005:099) squirrelmail security update
2005-02-15 00:00:00
freebsd
freebsd
squirrelmail -- XSS and remote code injection vulnerabilities
2005-01-29 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.3

Confidence

Low

EPSS

0.006

Percentile

78.7%

JSON
Related for CVE-2005-0075
cvelist1nvd1veracode1ubuntucve1gentoo1nessus5openvas5redhat2freebsd1