Unscored severity · published Apr 15, 2005
CVE-2005-1308
SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter followed by the desired script or HTML
–
CVSS
2.3%
EPSS
No
On KEV
Description
SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter followed by the desired script or HTML.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SQ
Sqwebmail · Inter7
3.4.1; 3.5.0; 3.5.1; 3.5.2; 3.5.3; 3.6.0; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1308
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1308
secunia.com
http://secunia.com/advisories/15119
www.securityfocus.com
http://www.securityfocus.com/bid/13374
More from Sqwebmail
–
CVE-2005-2820
Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or HTML via an e-mail message containing Internet Explorer…
–
CVE-2005-2769
Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 and possibly other versions allows remote attackers to inject arbitrary web script or HTML via an HTML e-mail…
–
CVE-2005-2724
Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or HTML via a file attachment that is processed by the Display…
–
CVE-2004-2313
Inter7 SqWebMail 3.4.1 through 3.6.1 generates different error messages for incorrect passwords versus correct passwords on non-mail-enabled accounts (such as root), which allows…
–
CVE-2004-0591
Cross-site scripting (XSS) vulnerability in the print_header_uc function for SqWebMail 4.0.4 and earlier, and possibly 3.x, allows remote attackers to inject arbitrary web script…