CVE-2005-3128: XSS
Published Oct 4, 2005
·Updated
Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for Squirrelmail allows remote attackers to inject arbitrary web script or HTML via the IMG tag.
Affected Software
2 affected components
Squirrelmail Address Add Plugin=1.9
Squirrelmail Address Add Plugin=2.0
Remediation
Patch Available
Patch Available
Patch Available
Event History
Oct 4, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-3128?
The severity of CVE-2005-3128 is classified as medium due to its potential to enable cross-site scripting attacks.
2
How do I fix CVE-2005-3128?
To fix CVE-2005-3128, upgrade to a version of the Squirrelmail Address Add Plugin that is not affected by this vulnerability.
3
What versions are impacted by CVE-2005-3128?
CVE-2005-3128 affects Squirrelmail Address Add Plugin versions 1.9 and 2.0.
4
What is the nature of CVE-2005-3128?
CVE-2005-3128 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary web scripts or HTML.
5
Can I exploit CVE-2005-3128?
Yes, CVE-2005-3128 can be exploited by remote attackers if the susceptible plugin is in use.