Ubuntu.comUB:CVE-2006-6142CVE-2006-6142
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.02 Low
EPSS
Percentile
88.7%
Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0
through 1.4.9 allow remote attackers to inject arbitrary web script or HTML
via the (1) mailto parameter in (a) webmail.php, the (2) session and (3)
delete_draft parameters in (b) compose.php, and (4) unspecified vectors
involving “a shortcoming in the magicHTML filter.”
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 6.06 | noarch | squirrelmail | < 1.4.6-1ubuntu0.1 | UNKNOWN |
| ubuntu | 6.10 | noarch | squirrelmail | < 1.4.8-1ubuntu0.1 | UNKNOWN |
| ubuntu | 7.04 | noarch | squirrelmail | < 1.4.9a-1ubuntu0.1 | UNKNOWN |
Related
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.02 Low
EPSS
Percentile
88.7%