vulnwire
7.5high

CVE-2002-1131in critical feed1 exploitNuclei template

Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via (1)…

Published 24 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
25.8%
percentile 98%
Public exploits
1
Exploit-DB · Nuclei check

Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via (1) addressbook.php, (2) options.php, (3) search.php, or (4) help.php.

Exploit prediction (EPSS)

25.75% probability of exploitation in the next 30 days, higher than 98% of all scored CVEs.

Exploits and detections

  • Nuclei template SquirrelMail 1.2.6/1.2.7 - Cross-Site Scripting · nuclei detection template
  • EDB-21811 SquirrelMail 1.2.6/1.2.7 - Multiple Cross-Site Scripting Vulnerabilities · webapps · 2002-09-19

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

References

  • iss.net /security_center/static/10145.php · vdb-entry, x_refsource_XF, x_transferred
  • debian.org /security/2002/dsa-191 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • securityfocus.com /bid/5763 · vdb-entry, x_refsource_BID, x_transferred
  • archives.neohapsis.com /archives/bugtraq/2002-09/0246.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • sourceforge.net /project/shownotes.php?group_id=311&release_id=110774 · x_refsource_CONFIRM, x_transferred
  • redhat.com /support/errata/RHSA-2002-204.html · vendor-advisory, x_refsource_REDHAT, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.