CVE-2004-0519: XSS
Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via multiple attack vectors, including the mailbox parameter in compose.php.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0519?
CVE-2004-0519 is classified as a medium severity vulnerability due to its potential to exploit multiple cross-site scripting flaws.
How do I fix CVE-2004-0519?
To fix CVE-2004-0519, upgrade SquirrelMail to version 1.4.3 or later, which addresses these vulnerabilities.
What software is affected by CVE-2004-0519?
CVE-2004-0519 affects SquirrelMail versions 1.0.4 through 1.4.2.
What types of attacks are possible with CVE-2004-0519?
Attackers can use CVE-2004-0519 to execute arbitrary scripts in the context of other users, potentially stealing authentication information.
Is CVE-2004-0519 relevant for my organization?
If your organization uses SquirrelMail version 1.0.4 to 1.4.2, CVE-2004-0519 poses a relevant risk that requires prompt attention.