CVE-2004-1036

2005-03-0105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2004-1036

cross-site scripting

xss

squirrelmail

mime.php

remote code execution

nvd

6 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.027 Low

EPSS

Percentile

90.4%

JSON

Cross-site scripting (XSS) vulnerability in the decoding of encoded text in certain headers in mime.php for SquirrelMail 1.4.3a and earlier, and 1.5.1-cvs before 23rd October 2004, allows remote attackers to execute arbitrary web script or HTML.

CPENameOperatorVersion
squirrelmail:squirrelmailsquirrelmaileq1.4.2
squirrelmail:squirrelmailsquirrelmaileq1.0.5
squirrelmail:squirrelmailsquirrelmaileq1.2.7
squirrelmail:squirrelmailsquirrelmaileq1.2.9
squirrelmail:squirrelmailsquirrelmaileq1.4.3_rc1
squirrelmail:squirrelmailsquirrelmaileq1.2.2
squirrelmail:squirrelmailsquirrelmaileq1.4.3
squirrelmail:squirrelmailsquirrelmaileq1.2.1
squirrelmail:squirrelmailsquirrelmaileq1.4.1
squirrelmail:squirrelmailsquirrelmaileq1.2

CPE	Name	Operator	Version
squirrelmail:squirrelmail	squirrelmail	eq	1.4.2
squirrelmail:squirrelmail	squirrelmail	eq	1.0.5
squirrelmail:squirrelmail	squirrelmail	eq	1.2.7
squirrelmail:squirrelmail	squirrelmail	eq	1.2.9
squirrelmail:squirrelmail	squirrelmail	eq	1.4.3_rc1
squirrelmail:squirrelmail	squirrelmail	eq	1.2.2
squirrelmail:squirrelmail	squirrelmail	eq	1.4.3
squirrelmail:squirrelmail	squirrelmail	eq	1.2.1
squirrelmail:squirrelmail	squirrelmail	eq	1.4.1
squirrelmail:squirrelmail	squirrelmail	eq	1.2