CVE-2005-2724

Published: 30 August 2005

Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or HTML via a file attachment that is processed by the Display feature. NOTE: the severity of this issue has been disputed by the developer.

Status

References

• https://ubuntu.com/security/notices/USN-201-1
• https://www.cve.org/CVERecord?id=CVE-2005-2724
• NVD
• Launchpad
• Debian