CVE-2004-0520
MEDIUM 6.8EPSS 7.1%
Cross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote attackers to insert arbitrary HTML and script via the content-type mail header, as demonstrated using read_body.php.
- CVSS v2.0 NVD
- 6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P - EPSS
- 7.13% chance of exploitation in the next 30 days, 94th percentile
- Published
- 2004-06-03
- Updated
- 2024-08-08
ExploitDB entries (1)
Security advisories
- http://rhn.redhat.com/errata/RHSA-2004-240.html
- http://secunia.com/advisories/11870
- http://secunia.com/advisories/12289
- http://www.debian.org/security/2004/dsa-535
- http://www.gentoo.org/security/en/glsa/glsa-200406-08.xml
- http://www.rs-labs.com/adv/RS-Labs-Advisory-2004-1.txt
- http://www.securityfocus.com/advisories/6827
- http://www.securityfocus.com/bid/10439
- https://bugzilla.fedora.us/show_bug.cgi?id=1733