← Database

CVE-2005-3128

MEDIUM CVSS: 4.3 Published: 2005-10-04 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for Squirrelmail allows remote attackers to inject arbitrary web script or HTML via the IMG tag.

Affected Platforms

Squirrelmail Address Add Plugin

Weakness Type

NVD-CWE-Other

References