Published: 02/09/2005 Updated: 26/10/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 and possibly other versions allows remote malicious users to inject arbitrary web script or HTML via an HTML e-mail containing tags with strings that contain ">" or other special characters, which is not properly sanitized by SqWebMail.

Vulnerable Product	Search on Vulmon	Subscribe to Product
inter7 sqwebmail 5.0.4

Several Cross Site Scripting vulnerabilities were discovered in SqWebmail A remote attacker could exploit this to execute arbitrary JavaScript or other active HTML embeddable content in the web browser of an SqWebmail user by sending specially crafted emails to him ...

Jakob Balle discovered a vulnerability in the handling of attachments in sqwebmail, a web mail application provided by the courier mail suite, which can be exploited by an attacker to conduct script insertion attacks For the old stable distribution (woody) this problem has been fixed in version 0373-26 For the stable distribution (sarge) this ...

source: wwwsecurityfocuscom/bid/14676/info SqWebMail is affected by a vulnerability that may allow remote attackers to inject and execute arbitrary script code in a user's browser This may allow for various attacks including session hijacking due to the theft of user credentials SqWebMail 504 is reportedly vulnerable to this issue ...

NVD-CWE-Other http://secunia.com/secunia_research/2005-39/advisory/http://www.securityfocus.com/bid/14676 http://secunia.com/advisories/16600/http://www.ubuntu.com/usn/usn-201-1 http://secunia.com/advisories/17156 http://marc.info/?l=bugtraq&m=112534112715638&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/22043 http://seclists.org/fulldisclosure/2005/Aug/975 https://usn.ubuntu.com/201-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/26200/

CVE-2005-2769

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect