1. CVE-Search
  2. CVE-2002-1131
ID CVE-2002-1131
Summary Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via (1) addressbook.php, (2) options.php, (3) search.php, or (4) help.php.
References
Vulnerable Configurations
  • cpe:2.3:a:squirrelmail:squirrelmail:-:*:*:*:*:*:*:*
    cpe:2.3:a:squirrelmail:squirrelmail:-:*:*:*:*:*:*:*
  • cpe:2.3:a:squirrelmail:squirrelmail:0.1:*:*:*:*:*:*:*
    cpe:2.3:a:squirrelmail:squirrelmail:0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:squirrelmail:squirrelmail:0.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:squirrelmail:squirrelmail:0.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:squirrelmail:squirrelmail:0.4:*:*:*:*:*:*:*
    cpe:2.3:a:squirrelmail:squirrelmail:0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:squirrelmail:squirrelmail:0.5:*:*:*:*:*:*:*
    cpe:2.3:a:squirrelmail:squirrelmail:0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:squirrelmail:squirrelmail:1.0:*:*:*:*:*:*:*
    cpe:2.3:a:squirrelmail:squirrelmail:1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:squirrelmail:squirrelmail:1.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:squirrelmail:squirrelmail:1.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:squirrelmail:squirrelmail:1.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:squirrelmail:squirrelmail:1.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:squirrelmail:squirrelmail:1.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:squirrelmail:squirrelmail:1.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:squirrelmail:squirrelmail:1.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:squirrelmail:squirrelmail:1.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:squirrelmail:squirrelmail:1.0.5:*:*:*:*:*:*:*
    cpe:2.3:a:squirrelmail:squirrelmail:1.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:squirrelmail:squirrelmail:1.0.6:*:*:*:*:*:*:*
    cpe:2.3:a:squirrelmail:squirrelmail:1.0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*
    cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*
    cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*
  • cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*
    cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*
  • cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*
    cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*
  • cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*
    cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 05-09-2008 - 20:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
redhat via4
advisories
rhsa
id RHSA-2002:204
refmap via4
bid 5763
bugtraq 20020919 Squirrel Mail 1.2.7 XSS Exploit
confirm http://sourceforge.net/project/shownotes.php?group_id=311&release_id=110774
debian DSA-191
xf squirrelmail-php-xss(10145)
Last major update 05-09-2008 - 20:29
Published 04-10-2002 - 04:00
Last modified 05-09-2008 - 20:29
Back to Top