CVE-2003-0160: XSS
Published Mar 26, 2003
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.2.11 allow remote attackers to inject arbitrary HTML code and steal information from a client's web browser.
Affected Software
1 affected component
Squirrelmail Squirrelmail<=1.2.11
Remediation
Event History
Mar 26, 2003
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Apr 2, 2003
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-0160?
The severity of CVE-2003-0160 is considered to be medium due to potential exploitation via cross-site scripting.
2
How do I fix CVE-2003-0160?
To fix CVE-2003-0160, upgrade SquirrelMail to version 1.2.11 or later.
3
What versions of SquirrelMail are affected by CVE-2003-0160?
All versions of SquirrelMail before version 1.2.11 are affected by CVE-2003-0160.
4
What type of vulnerability is CVE-2003-0160?
CVE-2003-0160 is a cross-site scripting (XSS) vulnerability.
5
What can attackers do with CVE-2003-0160?
Attackers can use CVE-2003-0160 to inject arbitrary HTML code and potentially steal sensitive information from users' web browsers.