Lucene search
HistoryNov 29, 2002 - 5:00 a.m.
CVE-2002-1276
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
5.5
Confidence
High
EPSS
0.001
Percentile
48.1%
An incomplete fix for a cross-site scripting (XSS) vulnerability in SquirrelMail 1.2.8 calls the strip_tags function on the PHP_SELF value but does not save the result back to that variable, leaving it open to cross-site scripting attacks.
Affected configurations
Node
squirrelmailsquirrelmailMatch1.2.8
| Vendor | Product | Version | CPE |
|---|---|---|---|
| squirrelmail | squirrelmail | 1.2.8 | cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2002-1276
2002-11-14 05:00:00
cve
cve
CVE-2002-1276
2002-11-29 05:00:00
nessus
nessus
SquirrelMail 1.2.9 / 1.2.10 read_body.php Multiple Parameter XSS
2003-03-19 00:00:00
Debian DSA-191-1 : squirrelmail - XSS
2004-09-29 00:00:00
openvas
openvas
SquirrelMail Cross-Site Scripting Vulnerability
2005-11-03 00:00:00
osv
osv
squirrelmail - cross site scripting
2002-11-07 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
5.5
Confidence
High
EPSS
0.001
Percentile
48.1%
Related for NVD:CVE-2002-1276