EDB-24160

functional

SquirrelMail 1.x - Email Header HTML Injection

view exploit source exploit_dbverifiedtype remoteauthor Roman Medinapublished 2004-05-31catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2004-0520USmedium6.8Exploit
Cross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote attackers to insert arbitrary HTML and script via the content-type mail header, as…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan