CVE-2004-1036

Cross-site scripting (XSS) vulnerability in the decoding of encoded text in certain headers in mime.php for SquirrelMail 1.4.3a and earlier, and 1.5.1-cvs…

published November 16, 2004

CVSS
—
EPSS
3%
Percentile
86.5
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in the decoding of encoded text in certain headers in mime.php for SquirrelMail 1.4.3a and earlier, and 1.5.1-cvs before 23rd October 2004, allows remote attackers to execute arbitrary web script or HTML.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02818 · 86.5th percentile
Published
2004-11-16T05:00Z
EPSS history
Timeline
  • 16 NOV 05:00Z
    Cross-site scripting (XSS) vulnerability in the decoding of encoded text in certain headers in mime.php for SquirrelMail 1.4.3a and earlier, and 1.5.1-cvs…
    cvelistv5