CVE-2005-1308 SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter followed by the desired script or HTML.
HighCVSS 7.5
EPSS 2.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter followed by the desired script or HTML.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| inter7 sqwebmail | = 3.4.1 | No fix listed |
| inter7 sqwebmail | = 3.5.0 | No fix listed |
| inter7 sqwebmail | = 3.5.1 | No fix listed |
| inter7 sqwebmail | = 3.5.2 | No fix listed |
| inter7 sqwebmail | = 3.5.3 | No fix listed |
| inter7 sqwebmail | = 3.6.0 | No fix listed |
| inter7 sqwebmail | = 3.6.1 | No fix listed |
| inter7 sqwebmail | = 4.0.4_2004-05-24 | No fix listed |
| inter7 sqwebmail | = 4.0.5 | No fix listed |
| debian/courier(Debian:12) | All versions | No fix listed |
| debian/courier(Debian:12) | = 1.0.16-3 | No fix listed |
| debian/courier(Debian:12) | = 1.0.16-3.1 | No fix listed |
| debian/courier(Debian:12) | = 1.0.16-3.2 | No fix listed |
| debian/courier(Debian:12) | = 1.3.13-1 | No fix listed |
| debian/courier(Debian:12) | = 1.3.13-10 | No fix listed |
| debian/courier(Debian:12) | = 1.3.13-11 | No fix listed |
| debian/courier(Debian:12) | = 1.3.13-2 | No fix listed |
| debian/courier(Debian:12) | = 1.3.13-3 | No fix listed |
| debian/courier(Debian:12) | = 1.3.13-4 | No fix listed |
| debian/courier(Debian:12) | = 1.3.13-5 | No fix listed |
| debian/courier(Debian:12) | = 1.3.13-6 | No fix listed |
| debian/courier(Debian:12) | = 1.3.13-7 | No fix listed |
| debian/courier(Debian:12) | = 1.3.13-8 | No fix listed |
| debian/courier(Debian:12) | = 1.3.13-9 | No fix listed |
| debian/courier(Debian:12) | = 1.4.1-1 | No fix listed |
Show 62 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/courier(Debian:12) | = 1.4.1-10 | No fix listed |
| debian/courier(Debian:12) | = 1.4.1-2 | No fix listed |
| debian/courier(Debian:12) | = 1.4.1-3 | No fix listed |
| debian/courier(Debian:12) | = 1.4.1-4 | No fix listed |
| debian/courier(Debian:12) | = 1.4.1-5 | No fix listed |
| debian/courier(Debian:12) | = 1.4.1-6 | No fix listed |
| debian/courier(Debian:12) | = 1.4.1-7 | No fix listed |
| debian/courier(Debian:12) | = 1.4.1-8 | No fix listed |
| debian/courier(Debian:12) | = 1.4.1-9 | No fix listed |
| debian/courier(Debian:12) | = 1.5.1-1 | No fix listed |
| debian/courier(Debian:12) | = 1.5.1-2 | No fix listed |
| debian/courier(Debian:12) | = 1.5.1-3 | No fix listed |
| debian/courier(Debian:12) | = 1.5.1-4 | No fix listed |
| debian/courier(Debian:12) | = 2.0.2-1 | No fix listed |
| debian/courier(Debian:12) | = 2.0.2-2 | No fix listed |
| debian/courier(Debian:12) | = 2.0.2-3 | No fix listed |
| debian/courier(Debian:12) | = 2.0.2-4 | No fix listed |
| debian/courier(Debian:12) | = 2.0.3-1 | No fix listed |
| debian/courier(Debian:12) | = 2.0.3-2 | No fix listed |
| debian/courier(Debian:12) | = 2.0.6-1 | No fix listed |
| debian/courier(Debian:13) | All versions | No fix listed |
| debian/courier(Debian:13) | = 1.4.1-10 | No fix listed |
| debian/courier(Debian:13) | = 1.4.1-3 | No fix listed |
| debian/courier(Debian:13) | = 1.4.1-3+deb13u1 | No fix listed |
| debian/courier(Debian:13) | = 1.4.1-3+deb13u2 | No fix listed |
| debian/courier(Debian:13) | = 1.4.1-4 | No fix listed |
| debian/courier(Debian:13) | = 1.4.1-5 | No fix listed |
| debian/courier(Debian:13) | = 1.4.1-6 | No fix listed |
| debian/courier(Debian:13) | = 1.4.1-7 | No fix listed |
| debian/courier(Debian:13) | = 1.4.1-8 | No fix listed |
| debian/courier(Debian:13) | = 1.4.1-9 | No fix listed |
| debian/courier(Debian:13) | = 1.5.1-1 | No fix listed |
| debian/courier(Debian:13) | = 1.5.1-2 | No fix listed |
| debian/courier(Debian:13) | = 1.5.1-3 | No fix listed |
| debian/courier(Debian:13) | = 1.5.1-4 | No fix listed |
| debian/courier(Debian:13) | = 2.0.2-1 | No fix listed |
| debian/courier(Debian:13) | = 2.0.2-2 | No fix listed |
| debian/courier(Debian:13) | = 2.0.2-3 | No fix listed |
| debian/courier(Debian:13) | = 2.0.2-4 | No fix listed |
| debian/courier(Debian:13) | = 2.0.3-1 | No fix listed |
| debian/courier(Debian:13) | = 2.0.3-2 | No fix listed |
| debian/courier(Debian:13) | = 2.0.6-1 | No fix listed |
| debian/courier(Debian:14) | All versions | No fix listed |
| debian/courier(Debian:14) | = 1.4.1-10 | No fix listed |
| debian/courier(Debian:14) | = 1.4.1-3 | No fix listed |
| debian/courier(Debian:14) | = 1.4.1-4 | No fix listed |
| debian/courier(Debian:14) | = 1.4.1-5 | No fix listed |
| debian/courier(Debian:14) | = 1.4.1-6 | No fix listed |
| debian/courier(Debian:14) | = 1.4.1-7 | No fix listed |
| debian/courier(Debian:14) | = 1.4.1-8 | No fix listed |
| debian/courier(Debian:14) | = 1.4.1-9 | No fix listed |
| debian/courier(Debian:14) | = 1.5.1-1 | No fix listed |
| debian/courier(Debian:14) | = 1.5.1-2 | No fix listed |
| debian/courier(Debian:14) | = 1.5.1-3 | No fix listed |
| debian/courier(Debian:14) | = 1.5.1-4 | No fix listed |
| debian/courier(Debian:14) | = 2.0.2-1 | No fix listed |
| debian/courier(Debian:14) | = 2.0.2-2 | No fix listed |
| debian/courier(Debian:14) | = 2.0.2-3 | No fix listed |
| debian/courier(Debian:14) | = 2.0.2-4 | No fix listed |
| debian/courier(Debian:14) | = 2.0.3-1 | No fix listed |
| debian/courier(Debian:14) | = 2.0.3-2 | No fix listed |
| debian/courier(Debian:14) | = 2.0.6-1 | No fix listed |
References
- Debian Security Tracker CVE-2005-1308 vendor-advisory
- bugs.debian.org issue-tracking
- 15119 third-party-advisory
- 13374 vdb-entry