cbcvebase.
CVE-2004-0639
published 2004-08-06

CVE-2004-0639: Multiple cross-site scripting (XSS) vulnerabilities in Squirrelmail 1.2.10 and earlier allow remote attackers to inject arbitrary HTML or script via (1) the…

PriorityP424medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EXPLOIT
EPSS
5.96%
93.3th percentile
Multiple cross-site scripting (XSS) vulnerabilities in Squirrelmail 1.2.10 and earlier allow remote attackers to inject arbitrary HTML or script via (1) the $mailer variable in read_body.php, (2) the $senderNames_part variable in mailbox_display.php, and possibly other vectors including (3) the $event_title variable or (4) the $event_text variable.

Affected

21 ranges
VendorProductVersion rangeFixed in
open_webmailopen_webmail——
open_webmailopen_webmail——
open_webmailopen_webmail——
sgipropack——
squirrelmailsquirrelmail——
squirrelmailsquirrelmail——
squirrelmailsquirrelmail——
squirrelmailsquirrelmail——
squirrelmailsquirrelmail——
squirrelmailsquirrelmail——
squirrelmailsquirrelmail——
squirrelmailsquirrelmail——
squirrelmailsquirrelmail——
squirrelmailsquirrelmail——
squirrelmailsquirrelmail——
squirrelmailsquirrelmail——
squirrelmailsquirrelmail——
squirrelmailsquirrelmail——
squirrelmailsquirrelmail——
squirrelmailsquirrelmail——
squirrelmailsquirrelmail——
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.