CVE-2005-3128

N/A Unknown

Published: October 04, 2005 Modified: April 16, 2026

Description

Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for Squirrelmail allows remote attackers to inject arbitrary web script or HTML via the IMG tag.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://docs.info.apple.com/article.html?artnum=306172

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=112801672520766&w=2

Source: cve@mitre.org

http://moritz-naumann.com/adv/0002/sqmadd/0002.txt

Source: cve@mitre.org

Exploit Patch Vendor Advisory

http://secunia.com/advisories/16987/

Source: cve@mitre.org

Patch Vendor Advisory

http://secunia.com/advisories/26235

Source: cve@mitre.org

http://securitytracker.com/id?1014988

Source: cve@mitre.org

http://squirrelmail.org/plugin_view.php?id=101

Source: cve@mitre.org

Patch

http://www.mandriva.com/security/advisories?name=MDKSA-2005:178

Source: cve@mitre.org

http://www.securityfocus.com/bid/14973

Source: cve@mitre.org

http://www.securityfocus.com/bid/25159

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/2732

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/22453

Source: cve@mitre.org

http://docs.info.apple.com/article.html?artnum=306172