PT-2004-2031

CVE-2004-1036

·

Publicado

2004-11-16

·

Atualizado

2017-10-11

Descrição por

CVSS 2.0
6.8
Média
MétricasAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: SquirrelMail versions 1.4.3a and earlier SquirrelMail versions 1.5.1-cvs before 23rd October 2004
Description: A cross-site scripting (XSS) issue exists in the decoding of encoded text in certain headers in mime.php, allowing remote attackers to execute arbitrary web script or HTML.
Recommendations: For SquirrelMail versions 1.4.3a and earlier, update to a version later than 1.4.3a. For SquirrelMail versions 1.5.1-cvs before 23rd October 2004, update to a version from 23rd October 2004 or later.
Explorabilidade
Correção
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
CVE-2004-1036
RHSA-2004:654
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com