VDB
CVE-2004-0519
CVE-2004-0519
PUBLISHED
CVSS 6.800000190734863 MEDIUM
Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via multiple attack vectors, including the mailbox parameter in compose.php.
EPSS 22.53% · 97.6th percentile
Risk Scores
CVSS 2.0
6.800000190734863
EPSS Score
22.53%
97.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| squirrelmail | squirrelmail | 1.2.3, 1.4.2, 1.2.11 |
| sgi | propack | 3.0 |
| n/a | n/a | * |
Timeline
- CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 26, 2023 EPSS Score
- Jul 18, 2023 EPSS Score
References
- 11686 third-party-advisory
- 12289 third-party-advisory
- 20040430 Re: SquirrelMail Cross Scripting Attacks.... mailing-list
- 11531 third-party-advisory
- GLSA-200405-16 vendor-advisory
- 20040429 SquirrelMail Cross Scripting Attacks.... mailing-list
- 10246 vdb
- https://nvd.nist.gov/vuln/detail/CVE-2004-0519 advisory
- http://secunia.com/advisories/11870 url
- http://www.novell.com/linux/security/advisories/2005_19_sr.html url
- http://www.securityfocus.com/advisories/6827 url
- ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc patch
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858 technical
- https://bugzilla.fedora.us/show_bug.cgi?id=1733 patch
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1006 technical
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10274 technical
- http://rhn.redhat.com/errata/RHSA-2004-240.html patch
- http://www.debian.org/security/2004/dsa-535 patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16025 technical