CVE-2002-1131

Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via (1) addressbook.php, (2) options.php, (3) search.php, or (4) help.php.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

25.75% chance of exploitation in the next 30 days, 98th percentile

Nuclei

high · CWE-80

Published

2002-09-24

Updated

2024-08-08

Proof-of-concept exploits (1)

• http://archives.neohapsis.com/archives/bugtraq/2002-09/0246.html

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2002/CVE-2002-1131.yaml

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/21811

Security advisories

• http://www.iss.net/security_center/static/10145.php
• http://www.redhat.com/support/errata/RHSA-2002-204.html
• http://www.securityfocus.com/bid/5763

References

• CVE Record
• NVD entry