CVE catalog
CVE-2004-0519
squirrelmail - several vulnerabilities
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 22.53% · Oct 25, 2026
Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via multiple attack vectors, including the mailbox parameter in compose.php. security flaw
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | squirrelmail | 3.0 | 1:1.2.6-1.4 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | squirrelmail | deb | 3.0 | 1:1.2.6-1.4 | Not reported | DSA-535 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed: