Lucene search
+L

CVE-2013-5645

🗓️ 29 Aug 2013 10:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 52 Views🌐 WEB

Roundcube webmail before 0.9.3 XSS vulnerabilitie

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2013-5645
29 Aug 201312:07
attackerkb
Cvelist
CVE-2013-5645
29 Aug 201310:00
cvelist
Debian CVE
CVE-2013-5645
29 Aug 201310:00
debiancve
EUVD
EUVD-2013-5485
7 Oct 202500:30
euvd
Tenable Nessus
Mandriva Linux Security Advisory : roundcubemail (MDVSA-2013:226)
6 Sep 201300:00
nessus
Tenable Nessus
openSUSE Security Update : roundcubemail (openSUSE-SU-2013:1420-1)
13 Jun 201400:00
nessus
Mageia
Updated roundcubemail package fixes security vulnerability
3 Sep 201319:50
mageia
NVD
CVE-2013-5645
29 Aug 201312:07
nvd
OpenVAS
Roundcube Webmail < 0.9.3 Multiple XSS Vulnerabilities
2 Sep 201900:00
openvas
OpenVAS
Mageia: Security Advisory (MGASA-2013-0270)
28 Jan 202200:00
openvas
Rows per page
NVD
Node
OR
roundcubewebmailRange0.9.2
roundcubewebmailMatch0.120050811
roundcubewebmailMatch0.120050820
roundcubewebmailMatch0.120051007
roundcubewebmailMatch0.120051021
roundcubewebmailMatch0.1alpha
roundcubewebmailMatch0.1beta
roundcubewebmailMatch0.1beta2
roundcubewebmailMatch0.1rc1
roundcubewebmailMatch0.1rc2
roundcubewebmailMatch0.1stable
roundcubewebmailMatch0.2alpha
roundcubewebmailMatch0.2beta
roundcubewebmailMatch0.2stable
roundcubewebmailMatch0.3beta
roundcubewebmailMatch0.3rc1
roundcubewebmailMatch0.3stable
roundcubewebmailMatch0.4beta
roundcubewebmailMatch0.5beta
roundcubewebmailMatch0.9beta
roundcubewebmailMatch0.9rc2
ParameterPositionPathDescriptionCWE
bodypathcompose.incXSS via message body in compose/new/draft modes (user-assisted remote attacker can inject script/HTML).CWE-79
signaturenestedsave_identity.incXSS via HTML signature in identity configuration (HTML Sign) allowing script execution.CWE-79

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 23:59Current
5.2Medium risk
Vulners AI Score5.2
CVSS 24.3
EPSS0.0188
52