Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2005-0104
HistoryFeb 06, 2005 - 5:00 a.m.

CVE-2005-0104

2005-02-0605:00:00
mitre
web.nvd.nist.gov
83
cve-2005-0104
cross-site scripting
xss
webmail
squirrelmail
vulnerability
nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.006

Percentile

78.6%

JSON

Cross-site scripting (XSS) vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to inject arbitrary web script or HTML via certain integer variables.

Affected configurations

Nvd
Node
squirrelmailsquirrelmailMatch1.0.4
OR
squirrelmailsquirrelmailMatch1.0.5
OR
squirrelmailsquirrelmailMatch1.2.0
OR
squirrelmailsquirrelmailMatch1.2.1
OR
squirrelmailsquirrelmailMatch1.2.2
OR
squirrelmailsquirrelmailMatch1.2.3
OR
squirrelmailsquirrelmailMatch1.2.4
OR
squirrelmailsquirrelmailMatch1.2.5
OR
squirrelmailsquirrelmailMatch1.2.6
OR
squirrelmailsquirrelmailMatch1.2.7
OR
squirrelmailsquirrelmailMatch1.2.8
OR
squirrelmailsquirrelmailMatch1.2.9
OR
squirrelmailsquirrelmailMatch1.2.10
OR
squirrelmailsquirrelmailMatch1.2.11
OR
squirrelmailsquirrelmailMatch1.4
OR
squirrelmailsquirrelmailMatch1.4.0
OR
squirrelmailsquirrelmailMatch1.4.1
OR
squirrelmailsquirrelmailMatch1.4.2
OR
squirrelmailsquirrelmailMatch1.4.3
OR
squirrelmailsquirrelmailMatch1.4.3_rc1
OR
squirrelmailsquirrelmailMatch1.4.3a
OR
squirrelmailsquirrelmailMatch1.44
VendorProductVersionCPE
squirrelmailsquirrelmail1.0.4cpe:2.3:a:squirrelmail:squirrelmail:1.0.4:*:*:*:*:*:*:*
squirrelmailsquirrelmail1.0.5cpe:2.3:a:squirrelmail:squirrelmail:1.0.5:*:*:*:*:*:*:*
squirrelmailsquirrelmail1.2.0cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*
squirrelmailsquirrelmail1.2.1cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*
squirrelmailsquirrelmail1.2.2cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*
squirrelmailsquirrelmail1.2.3cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*
squirrelmailsquirrelmail1.2.4cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*
squirrelmailsquirrelmail1.2.5cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*
squirrelmailsquirrelmail1.2.6cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*
squirrelmailsquirrelmail1.2.7cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*
Rows per page:
1-10 of 221

Related

nessus 8
ubuntucve 1
nvd 1
cvelist 1
debian 4
openvas 9
osv 1
securityvulns 1
redhat 2
gentoo 1
freebsd 1
nessus
nessus
Fedora Core 3 : squirrelmail-1.4.4-1.FC3 (2005-260)
2005-09-12 00:00:00
Fedora Core 2 : squirrelmail-1.4.4-1.FC2 (2005-259)
2005-05-19 00:00:00
Debian DSA-662-2 : squirrelmail - several vulnerabilities
2005-02-02 00:00:00
ubuntucve
ubuntucve
CVE-2005-0104
2005-01-29 00:00:00
nvd
nvd
CVE-2005-0104
2005-01-29 05:00:00
cvelist
cvelist
CVE-2005-0104
2005-02-06 05:00:00
debian
debian
[SECURITY] [DSA 662-1] New squirrelmail package fixes several vulnerabilities
2005-02-01 14:44:23
[SECURITY] [DSA 662-2] New squirrelmail package fixes regression
2005-03-14 14:24:00
[SECURITY] [DSA 662-2] New squirrelmail package fixes regression
2005-03-14 14:24:00
openvas
openvas
Debian Security Advisory DSA 662-1 (squirrelmail)
2008-01-17 00:00:00
Debian Security Advisory DSA 662-1 (squirrelmail)
2008-01-17 00:00:00
Debian Security Advisory DSA 662-2 (squirrelmail)
2008-01-17 00:00:00
osv
osv
squirrelmail - several
2005-03-14 00:00:00
securityvulns
securityvulns
SquirrelMail Security Advisory
2005-01-30 00:00:00
redhat
redhat
(RHSA-2005:135) squirrelmail security update
2005-02-10 00:00:00
(RHSA-2005:099) squirrelmail security update
2005-02-15 00:00:00
gentoo
gentoo
SquirrelMail: Multiple vulnerabilities
2005-01-28 00:00:00
freebsd
freebsd
squirrelmail -- XSS and remote code injection vulnerabilities
2005-01-29 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.006

Percentile

78.6%

JSON
Related for CVE-2005-0104
nessus8ubuntucve1nvd1cvelist1debian4openvas9osv1securityvulns1redhat2gentoo1freebsd1