CVE-2012-0323: XSS
Published Mar 9, 2012
·Updated
Cross-site scripting (XSS) vulnerability in the Autocomplete plugin before 3.0 for SquirrelMail allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
7 affected components
Paul Lesniewsk Autocomplete<=2.1
Paul Lesniewsk Autocomplete=1.0
Paul Lesniewsk Autocomplete=1.1
Paul Lesniewsk Autocomplete=1.2
Paul Lesniewsk Autocomplete=1.3
Paul Lesniewsk Autocomplete=2.0
Squirrelmail Squirrelmail
Event History
Mar 9, 2012
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-0323?
CVE-2012-0323 has a medium severity rating due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2012-0323?
To fix CVE-2012-0323, upgrade the Autocomplete plugin to version 3.0 or later.
3
Which versions of the Autocomplete plugin are affected by CVE-2012-0323?
CVE-2012-0323 affects Autocomplete plugin versions earlier than 3.0, including versions 1.0 to 2.1.
4
What type of vulnerability is CVE-2012-0323?
CVE-2012-0323 is categorized as a cross-site scripting (XSS) vulnerability.
5
Can CVE-2012-0323 be exploited remotely?
Yes, CVE-2012-0323 can be exploited remotely by attackers injecting arbitrary web scripts or HTML.