Security Advisory

CVE-2004-1036

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2004-11-16 05:00:00
Last updated 2024-08-08 00:39:00
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in the decoding of encoded text in certain headers in mime.php for SquirrelMail 1.4.3a and earlier, and 1.5.1-cvs before 23rd October 2004, allows remote attackers to execute arbitrary web script or HTML.