Lucene search
HistoryOct 04, 2002 - 4:00 a.m.
CVE-2002-1131
cve-2002-1131
cross-site scripting
squirrelmail
vulnerability
remote attackers
web users
6.6 Medium
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.048 Low
EPSS
Percentile
92.6%
Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via (1) addressbook.php, (2) options.php, (3) search.php, or (4) help.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| squirrelmail:squirrelmail | squirrelmail | le | 1.2.7 |
Related
nuclei
nuclei
SquirrelMail 1.2.6/1.2.7 - Cross-Site Scripting
2021-11-15 18:09:04
openvas
openvas
Debian Security Advisory DSA 191-2 (squirrelmail)
2008-01-17 00:00:00
Debian Security Advisory DSA 191-2 (squirrelmail)
2008-01-17 00:00:00
Debian Security Advisory DSA 191-1 (squirrelmail)
2008-01-17 00:00:00
debian
debian
nessus
nessus
Debian DSA-191-1 : squirrelmail - XSS
2004-09-29 00:00:00
osv
osv
squirrelmail - cross site scripting
2002-11-07 00:00:00
6.6 Medium
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.048 Low
EPSS
Percentile
92.6%
Related for CVE-2002-1131