CVE-2004-0519

NUCLEI

SquirrelMail 1.4.2 - XSS

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via multiple attack vectors, including the mailbox parameter in compose.php.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Alvin Alex · textwebappsphp

https://www.exploit-db.com/exploits/24068

View Code ZIP pw:eip

Nuclei Templates (1)

SquirrelMail 1.4.x - Folder Name Cross-Site Scripting

MEDIUMby dhiyaneshDk

References (18)

[Patch] ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc

[Vendor Advisory] http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858

[Mailing List] http://marc.info/?l=bugtraq&m=108334862800260

[Patch, Vendor Advisory] http://rhn.redhat.com/errata/RHSA-2004-240.html

[Patch, Vendor Advisory] http://secunia.com/advisories/11531

[Patch, Vendor Advisory] http://secunia.com/advisories/11686

[Patch, Vendor Advisory] http://secunia.com/advisories/11870

[Patch] http://secunia.com/advisories/12289

[Vendor Advisory] http://security.gentoo.org/glsa/glsa-200405-16.xml

[Patch, Vendor Advisory] http://www.debian.org/security/2004/dsa-535

[Vendor Advisory] http://www.novell.com/linux/security/advisories/2005_19_sr.html

[Patch, Vendor Advisory] http://www.securityfocus.com/advisories/6827

[Exploit, Patch] http://www.securityfocus.com/bid/10246

[Patch] https://bugzilla.fedora.us/show_bug.cgi?id=1733

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/361857

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/16025

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1006

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10274

Scores

EPSS 0.0019

EPSS Percentile 40.6%

Details

Status published

Products (18)

sgi/propack 3.0

squirrelmail/squirrelmail 1.0.4

squirrelmail/squirrelmail 1.0.5

squirrelmail/squirrelmail 1.2.0

squirrelmail/squirrelmail 1.2.1

squirrelmail/squirrelmail 1.2.2

squirrelmail/squirrelmail 1.2.3

squirrelmail/squirrelmail 1.2.4

squirrelmail/squirrelmail 1.2.5

squirrelmail/squirrelmail 1.2.6

... and 8 more

Published Aug 18, 2004

Tracked Since Feb 18, 2026