PT-2004-2031

CVE-2004-1036

·

Published

2004-11-16

·

Updated

2017-10-11

Description by

CVSS 2.0
6.8
Medium
MetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: SquirrelMail versions 1.4.3a and earlier SquirrelMail versions 1.5.1-cvs before 23rd October 2004
Description: A cross-site scripting (XSS) issue exists in the decoding of encoded text in certain headers in mime.php, allowing remote attackers to execute arbitrary web script or HTML.
Recommendations: For SquirrelMail versions 1.4.3a and earlier, update to a version later than 1.4.3a. For SquirrelMail versions 1.5.1-cvs before 23rd October 2004, update to a version from 23rd October 2004 or later.
Exploitability
Fix
Researchers
Vendors
Affected products
Related identifiers
CVE-2004-1036
RHSA-2004:654
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com