Lucene search
FreeBSDD1CE8A4F-C235-11DD-8CBC-00163E000016HistoryDec 03, 2008 - 12:00 a.m.
squirrelmail -- Cross site scripting vulnerability
2008-12-0300:00:00
vuxml.freebsd.org
12
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
70.6%
Squirrelmail team reports:
An issue was fixed that allowed an attacker to send specially-
crafted hyperlinks in a message that could execute cross-site
scripting (XSS) when the user viewed the message in SquirrelMail.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | squirrelmail | < 1.4.17 | UNKNOWN |
Related
nessus
nessus
Fedora 8 : squirrelmail-1.4.17-1.fc8 (2008-10918)
2008-12-08 00:00:00
Fedora 10 : squirrelmail-1.4.17-2.fc10 (2008-10748)
2009-04-23 00:00:00
openSUSE 10 Security Update : squirrelmail (squirrelmail-5860)
2008-12-16 00:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: squirrelmail-1.4.17-2.fc10
2008-12-07 04:14:00
[SECURITY] Fedora 9 Update: squirrelmail-1.4.17-1.fc9
2008-12-07 04:13:16
[SECURITY] Fedora 8 Update: squirrelmail-1.4.17-1.fc8
2008-12-07 04:33:45
debian
debian
[SECURITY] [DSA 1682-1] New squirrelmail packages fix cross site scripting
2008-12-07 16:22:55
prion
prion
Cross site scripting
2008-12-05 00:30:00
openvas
openvas
FreeBSD Ports: squirrelmail
2008-12-10 00:00:00
Debian Security Advisory DSA 1682-1 (squirrelmail)
2008-12-10 00:00:00
Debian: Security Advisory (DSA-1682-1)
2008-12-10 00:00:00
ubuntucve
ubuntucve
CVE-2008-2379
2008-12-05 00:00:00
cve
cve
CVE-2008-2379
2008-12-05 00:30:00
veracode
veracode
Cross-Site Scripting (XSS)
2020-04-10 00:36:06
seebug
seebug
SquirrelMail畸形邮件消息HTML注入漏洞
2008-12-05 00:00:00
centos
centos
squirrelmail security update
2009-01-12 15:25:30
redhat
redhat
(RHSA-2009:0010) Moderate: squirrelmail security update
2009-01-12 00:00:00
oraclelinux
oraclelinux
squirrelmail security update
2009-01-12 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
70.6%
Related for D1CE8A4F-C235-11DD-8CBC-00163E000016