CVE-2005-3128 Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for Squirrelmail allows remote attackers to inject arbitrary web script or HTML via the IMG tag.
MediumCVSS 4.3
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for Squirrelmail allows remote attackers to inject arbitrary web script or HTML via the IMG tag.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| squirrelmail address add plugin | = 1.9 | No fix listed |
| squirrelmail address add plugin | = 2.0 | No fix listed |
References
- docs.info.apple.com
- APPLE-SA-2007-07-31 vendor-advisory
- 20050928 SquirrelMail Address Add Plugin XSS mailing-list
- moritz-naumann.com exploit patch vendor-advisory
- 16987 patch third-party-advisory vendor-advisory
- 26235 third-party-advisory
- 1014988 vdb-entry
- squirrelmail.org patch
- MDKSA-2005:178 vendor-advisory
- 14973 vdb-entry
- 25159 vdb-entry
- ADV-2007-2732 vdb-entry
- squirrelmail-add-xss(22453) vdb-entry