CVE-2005-3128
Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for...
Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for Squirrelmail allows remote attackers to inject arbitrary web script or HTML via the IMG tag.
Exploit likelihood
What each source reports
NVD Score used
Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for Squirrelmail allows remote attackers to inject arbitrary web script or HTML via the IMG tag.
- Record
CVE-2005-3128- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for Squirrelmail allows remote attackers to inject arbitrary web script or HTML via the IMG tag.
- Record
CVE-2005-3128- Updated
- 2026-11-02
EUVDEUVD-2005-3128 No score
Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for Squirrelmail allows remote attackers to inject arbitrary web script or HTML via the IMG tag.
- Record
EUVD-2005-3128- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mq36-cw38-g8hv No score
Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for...
Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for Squirrelmail allows remote attackers to inject arbitrary web script or HTML via the IMG tag.
- Record
GHSA-mq36-cw38-g8hv- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | SquirrelMail 1.4.2 Address Add Plugin - 'add.php' Cross-Site Scripting | 2005-09-29 |
| Nuclei | SquirrelMail Address Add 1.4.2 - Cross-Site Scripting |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Nuclei, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-3128 is a medium vulnerability (CVSS 4.3) in Squirrelmail Address Add Plugin, published October 4, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.44%, the 88th percentile. No source names a fixed version.
References
vupen.com/english/advisories/2007/2732
lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
mandriva.com/security/advisories?name=MDKSA-2005:178
squirrelmail.org/plugin_view.php?id=101
moritz-naumann.com/adv/0002/sqmadd/0002.txt
securityfocus.com/bid/14973
Show 9 moreShow less
securitytracker.com/id?1014988
docs.info.apple.com/article.html?artnum=306172
marc.info?l=bugtraq&m=112801672520766&w=2
exchange.xforce.ibmcloud.com/vulnerabilities/22453
secunia.com/advisories/16987
nvd.nist.gov/vuln/detail/CVE-2005-3128
github.com/advisories/GHSA-mq36-cw38-g8hv