Published: 24/02/2006 Updated: 11/10/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

webmail.php in SquirrelMail 1.4.0 to 1.4.5 allows remote malicious users to inject arbitrary web pages into the right frame via a URL in the right_frame parameter. NOTE: this has been called a cross-site scripting (XSS) issue, but it is different than what is normally identified as XSS.

Vulnerable Product	Search on Vulmon	Subscribe to Product
squirrelmail squirrelmail 1.4.3a
squirrelmail squirrelmail 1.4.4
squirrelmail squirrelmail 1.4.3_r3
squirrelmail squirrelmail 1.4.3_rc1
squirrelmail squirrelmail 1.4.2
squirrelmail squirrelmail 1.4.3
squirrelmail squirrelmail 1.4.6_rc1
squirrelmail squirrelmail 1.4_rc1
squirrelmail squirrelmail 1.4
squirrelmail squirrelmail 1.4.1
squirrelmail squirrelmail 1.4.4_rc1
squirrelmail squirrelmail 1.4.5

Debian Bug report logs - #354063 CVE-2006-0377: IMAP injection attempts Package: squirrelmail; Maintainer for squirrelmail is Jeroen van Wolffelaar <jeroen@wolffelaarnl>; Source for squirrelmail is src:squirrelmail (PTS, buildd, popcon) Reported by: Geoff Crompton <geoffcrompton@strategicdatacomau> Date: Thu, 23 ...

Debian Bug report logs - #354064 CVE-2006-0188: possible XSS through right_main parameter of webmailphp Package: squirrelmail; Maintainer for squirrelmail is Jeroen van Wolffelaar <jeroen@wolffelaarnl>; Source for squirrelmail is src:squirrelmail (PTS, buildd, popcon) Reported by: Geoff Crompton <geoffcrompton@strategi ...

Debian Bug report logs - #354062 CVE-2006-0195: XSS re comments in styles Package: squirrelmail; Maintainer for squirrelmail is Jeroen van Wolffelaar <jeroen@wolffelaarnl>; Source for squirrelmail is src:squirrelmail (PTS, buildd, popcon) Reported by: Geoff Crompton <geoffcrompton@strategicdatacomau> Date: Thu, 2 ...

NVD-CWE-Other http://www.squirrelmail.org/security/issue/2006-02-01 http://www.securityfocus.com/bid/16756 http://securitytracker.com/id?1015662 http://secunia.com/advisories/18985 http://www.debian.org/security/2006/dsa-988 http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00004.html http://www.novell.com/linux/security/advisories/2006_05_sr.html http://secunia.com/advisories/19131 http://secunia.com/advisories/19130 http://secunia.com/advisories/19176 http://www.gentoo.org/security/en/glsa/glsa-200603-09.xml http://secunia.com/advisories/19205 http://www.redhat.com/support/errata/RHSA-2006-0283.html http://secunia.com/advisories/19960 ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc http://secunia.com/advisories/20210 http://www.mandriva.com/security/advisories?name=MDKSA-2006:049 http://www.vupen.com/english/advisories/2006/0689 https://exchange.xforce.ibmcloud.com/vulnerabilities/24847 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10419 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=354063

CVE-2006-0188

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect