Squirrelmail Sårbarheter

Version

1.4.1	32
1.4.2	30
1.4.3	30
1.4.0	24
1.4.4	22

Åtgärd

Official Fix	44
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	26

Utnyttjbarhet

High	0
Functional	0
Proof-of-Concept	22
Unproven	0
Not Defined	48

Åtkomstvektor

Not Defined	0
Physical	0
Local	2
Adjacent	0
Network	68

Autentisering

Not Defined	0
High	0
Low	4
None	66

Användarinteraktion

Not Defined	0
Required	42
None	28

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	16
≤6	24
≤7	18
≤8	10
≤9	0
≤10	2

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	10
≤5	8
≤6	36
≤7	12
≤8	2
≤9	0
≤10	2

VulDB

≤1	0
≤2	0
≤3	0
≤4	0
≤5	26
≤6	14
≤7	18
≤8	10
≤9	0
≤10	2

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	10
≤8	0
≤9	0
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Säljare

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Utnyttja 0-dagars

<1k	6
<2k	38
<5k	26
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Utnyttja idag

<1k	70
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (99): 0.0.1, 0.1, 1, 1.0, 1.0.1, 1.0.4, 1.0.5, 1.1, 1.2, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5, 1.2.6, 1.2.6-rc1, 1.2.7, 1.2.8, 1.2.9, 1.2.11, 1.3, 1.4, 1.4 Rc1, 1.4.0-r1, 1.4.1, 1.4.2, 1.4.3, 1.4.3 R3, 1.4.3 Rc1, 1.4.3a, 1.4.3aa, 1.4.4, 1.4.4 Rc1, 1.4.5, 1.4.6, 1.4.6 Cvs, 1.4.6 Rc1, 1.4.7, 1.4.8, 1.4.8.4fc6, 1.4.9, 1.4.9a, 1.4.10a, 1.4.11, 1.4.12, 1.4.13, 1.4.14, 1.4.15, 1.4.16, 1.4.17, 1.4.18, 1.4.19, 1.4.21, 1.4.22, 1.5, 1.5 Dev, 1.5.1, 1.5.2, 1.6, 1.7, 1.8, 1.9, 1.10, 1.11, 1.12, 1.13, 1.14, 1.15, 1.16, 1.17, 1.18, 1.19, 1.20, 1.21, 1.22, 1.23, 1.24, 1.25, 1.26, 1.27, 1.28, 1.29, 1.30, 1.31, 1.32, 1.33, 1.34, 1.35, 1.36, 1.37, 1.38, 1.39, 1.40, 1.41, 1.42, 1.43, 1.44, 2.0, 3.0

Programvarutyp: Mail Client Software

Publicerad	Base	Temp	Sårbarhet	0day	I dag	Utn	Rem	CTI	CVE
20/06/2020	9.8	9.8	SquirrelMail compose.php Serialized privilegier eskalering	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2020-14933
20/06/2020	9.8	9.8	SquirrelMail compose.php Serialized privilegier eskalering	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2020-14932
01/07/2019	5.2	5.2	SquirrelMail HTML Email cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2019-12970
05/08/2018	5.2	5.2	SquirrelMail SVG Animation cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2018-14955
05/08/2018	5.2	5.2	SquirrelMail formaction cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2018-14954
05/08/2018	5.2	5.2	SquirrelMail Math Tag cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2018-14953
05/08/2018	5.2	5.2	SquirrelMail Math Tag cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2018-14952
05/08/2018	5.2	5.2	SquirrelMail Form cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2018-14951
05/08/2018	5.2	5.2	SquirrelMail svg Tag cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	CVE-2018-14950
17/03/2018	7.5	7.4	SquirrelMail Deliver.class.php kataloggenomgång	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2018-8741