CVE-2004-0519 PoC — SquirrelMail文件夹名称跨站脚本漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2004/CVE-2004-0519.yaml

Associated Vulnerability

Title:SquirrelMail文件夹名称跨站脚本漏洞 (CVE-2004-0519)
Description:SquirrelMail 1.4.2存在多个跨站脚本(XSS)漏洞。远程攻击者可以像其他用户一样通过多个包含compose.php邮箱参数的攻击向量来执行任意脚本并窃取身份验证信息。

Description

Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script and possibly steal authentication information via multiple attack vectors, including the mailbox parameter in compose.php.

File Snapshot


 id: CVE-2004-0519

info:
  name: SquirrelMail 1.4.x - Folder Name Cross-Site Scripting
  author: dhi

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!