CVE-2012-0323

Cross-site scripting (XSS) vulnerability in the Autocomplete plugin before 3.0 for SquirrelMail allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:paul_lesniewsk:autocomplete:*:*:*:*:*:*:*:*
cpe:2.3:a:paul_lesniewsk:autocomplete:1.0:*:*:*:*:*:*:*
cpe:2.3:a:paul_lesniewsk:autocomplete:1.1:*:*:*:*:*:*:*
cpe:2.3:a:paul_lesniewsk:autocomplete:1.2:*:*:*:*:*:*:*
cpe:2.3:a:paul_lesniewsk:autocomplete:1.3:*:*:*:*:*:*:*
cpe:2.3:a:paul_lesniewsk:autocomplete:2.0:*:*:*:*:*:*:*
cpe:2.3:a:squirrelmail:squirrelmail:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2012-03-09 11:55

Updated : 2024-02-04 17:54


NVD link : CVE-2012-0323

Mitre link : CVE-2012-0323

CVE.ORG link : CVE-2012-0323


JSON object : View

Products Affected

paul_lesniewsk

  • autocomplete

squirrelmail

  • squirrelmail
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')