Unscored severity · published Aug 18, 2004
CVE-2004-0519
Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users and possibly steal authentication…
–
CVSS
22.5%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via multiple attack vectors, including the mailbox parameter in compose.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)22.5% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PR
Propack · Sgi
3.0 · source: NVD
SQ
Squirrelmail · Squirrelmail
1.0.4; 1.0.5; 1.2.0; 1.2.1; 1.2.2; 1.2.3; +11 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0519
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0519
distro.conectiva.com.br
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858
marc.info
http://marc.info/?l=bugtraq&m=108334862800260
Patch
http://rhn.redhat.com/errata/RHSA-2004-240.html
Patch
http://secunia.com/advisories/11531
Patch
http://secunia.com/advisories/11686
More from Propack
7.5
CVE-2004-0079
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake…
–
CVE-2006-1167
SGI ProPack 3 SP6 kernel displays the frame buffer contents of the last session after a reboot, which might allow local users to obtain sensitive information
–
CVE-2005-3624
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via…
–
CVE-2005-3625
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams…
–
CVE-2005-3626
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted…