Login Request a demo
Unscored severity · published Oct 4, 2005
CVE-2005-3128
Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for Squirrelmail allows remote attackers to inject arbitrary web script or HTML via the IMG…
–
CVSS
3.4%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for Squirrelmail allows remote attackers to inject arbitrary web script or HTML via the IMG tag.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.4% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AA
Address Add Plugin · Squirrelmail
1.9; 2.0 · source: NVD
Affected product
AA
Address Add Plugin
Squirrelmail
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3128
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3128
docs.info.apple.com
http://docs.info.apple.com/article.html?artnum=306172
lists.apple.com
http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
marc.info
http://marc.info/?l=bugtraq&m=112801672520766&w=2
Exploit
http://moritz-naumann.com/adv/0002/sqmadd/0002.txt
Patch
http://secunia.com/advisories/16987/
secunia.com
http://secunia.com/advisories/26235