Home  >  CVE-2002-1649
CVE Details for CVE: CVE-2002-1649
Summary
Cross-site scripting (XSS) vulnerability in read_body.php in SquirrelMail before 1.2.3 allows remote attackers to execute arbitrary Javascript via a javascript: URL in an IMG tag.
Timestamps
Last major update 11-07-2017 - 01:29
Published 31-12-2002 - 05:00
Last modified 11-07-2017 - 01:29
References
Vulnerable Configurations
  • cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*
CAPEC
Click the CAPEC title to display a description
CWE
NVD-CWE-Other
CVSS
Base
4.3
Impact
2.9
Exploitability
8.6
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
CVSS3
None
VIA4 references
cvss-vector via4
AV:N/AC:M/Au:N/C:N/I:P/A:N
refmap via4
bid 3956
bugtraq 20020124 Vulnerabilities in squirrelmail
cert-vn VU#153043
xf squirrelmail-html-execute-script(7989)
statements via4
contributor Mark J Cox
lastmodified 2006-08-30
organization Red Hat
statement Not vulnerable. This issue did not affect the versions of SquirrelMail as shipped with Red Hat Enterprise Linux 3 or 4.