CVE-2004-0519

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 22.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-08-18 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via multiple attack vectors, including the mailbox parameter in compose.php.

Affected products

Sgi Propack: 3.0
SquirrelMail: 1.0.4, 1.0.5, 1.2.0, 1.2.1, 1.2.2, 1.2.3 (+11)

References

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858
http://marc.info/?l=bugtraq&m=108334862800260
http://rhn.redhat.com/errata/RHSA-2004-240.html
http://secunia.com/advisories/11531
http://secunia.com/advisories/11686
http://secunia.com/advisories/11870
http://secunia.com/advisories/12289
http://security.gentoo.org/glsa/glsa-200405-16.xml
http://www.debian.org/security/2004/dsa-535
http://www.novell.com/linux/security/advisories/2005_19_sr.html
http://www.securityfocus.com/advisories/6827

Get alerted when CVE-2004-0519 or the next vulnerability affects your stack