CVE-2009-1578

Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.4.18 and NaSMail before 1.7 allow remote attackers to inject arbitrary web script…

published May 14, 2009

CVSS
—
EPSS
2%
Percentile
80.3
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.4.18 and NaSMail before 1.7 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) certain encrypted strings in e-mail headers, related to contrib/decrypt_headers.php; (2) PHP_SELF; and (3) the query string (aka QUERY_STRING).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01977 · 80.3th percentile
Published
2009-05-14T17:00Z
EPSS history
Timeline
  • 14 MAY 17:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.4.18 and NaSMail before 1.7 allow remote attackers to inject arbitrary web script…
    cvelistv5