CVE-2005-3128

CVE-2005-3128 is a cross-site scripting vulnerability in the Address Add Plugin for SquirrelMail (versions 1.9 and 2.0) where the add.php functionality fails to sanitize input, allowing an attacker to inject arbitrary script via the IMG tag . The vulnerability could enable execution of script in ...