Lucene search
HistoryMar 28, 2005 - 5:00 a.m.
CVE-2002-1649
cve-2002-1649
cross-site scripting
xss
squirrelmail
security vulnerability
6.2 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
76.6%
Cross-site scripting (XSS) vulnerability in read_body.php in SquirrelMail before 1.2.3 allows remote attackers to execute arbitrary Javascript via a javascript: URL in an IMG tag.
Affected configurations
Node
squirrelmailsquirrelmailMatch1.2.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| squirrelmail:squirrelmail | squirrelmail | eq | 1.2.2 |
Related
nvd
nvd
CVE-2002-1649
2002-12-31 05:00:00
cvelist
cvelist
CVE-2002-1649
2005-03-28 05:00:00
redhatcve
redhatcve
CVE-2002-1649
2015-10-30 09:56:19
6.2 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
76.6%
Related for CVE-2002-1649