CVE-2005-3128

Exploit

EPSS 1.75%
Veröffentlicht 04.10.2005 22:02:00
Zuletzt bearbeitet 16.04.2026 00:27:16
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for Squirrelmail allows remote attackers to inject arbitrary web script or HTML via the IMG tag.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 16

NVD 2 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Squirrelmail ≫ Address Add Plugin Version1.9

Squirrelmail ≫ Address Add Plugin Version2.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.75%	0.826

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://docs.info.apple.com/article.html?artnum=306172

http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html

http://secunia.com/advisories/26235

http://www.securityfocus.com/bid/25159

http://www.vupen.com/english/advisories/2007/2732

http://marc.info/?l=bugtraq&m=112801672520766&w=2

http://moritz-naumann.com/adv/0002/sqmadd/0002.txt

Patch

Vendor Advisory

Exploit

http://secunia.com/advisories/16987/

Patch

Vendor Advisory

http://securitytracker.com/id?1014988

http://squirrelmail.org/plugin_view.php?id=101

Patch

http://www.mandriva.com/security/advisories?name=MDKSA-2005:178

http://www.securityfocus.com/bid/14973

https://exchange.xforce.ibmcloud.com/vulnerabilities/22453

https://nvd.nist.gov/vuln/detail/CVE-2005-3128

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-3128

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-3128

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2005-3128