CVE-2005-3128
Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for...
CVE-2005-3128 is a medium vulnerability (CVSS 4.3) in Squirrelmail Address Add Plugin, published October 4, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.44%, the 89th percentile. No source names a fixed version.
- Severity
- 4.3 MediumCVSS 2.0, NVD
- Exploit chance
- 3.44%EPSS, 89th percentile
- Exploitation
- None known2 public exploits
- Fixed in
- No fix listedNo source names one
Description
Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for Squirrelmail allows remote attackers to inject arbitrary web script or HTML via the IMG tag.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | SquirrelMail 1.4.2 Address Add Plugin - 'add.php' Cross-Site Scripting | 2005-09-29 |
| Nuclei | SquirrelMail Address Add 1.4.2 - Cross-Site Scripting |
What each source reports
NVD Score used
Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for Squirrelmail allows remote attackers to inject arbitrary web script or HTML via the IMG tag.
- Record
CVE-2005-3128- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE ListNo score
Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for Squirrelmail allows remote attackers to inject arbitrary web script or HTML via the IMG tag.
- Record
CVE-2005-3128- Updated
- 2026-11-02
EUVDEUVD-2005-3128No score
Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for Squirrelmail allows remote attackers to inject arbitrary web script or HTML via the IMG tag.
- Record
EUVD-2005-3128- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mq36-cw38-g8hvNo score
Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for...
Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for Squirrelmail allows remote attackers to inject arbitrary web script or HTML via the IMG tag.
- Record
GHSA-mq36-cw38-g8hv- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Nuclei, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
vupen.com/english/advisories/2007/2732
lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
mandriva.com/security/advisories?name=MDKSA-2005:178
squirrelmail.org/plugin_view.php?id=101
moritz-naumann.com/adv/0002/sqmadd/0002.txt
securityfocus.com/bid/14973
Show 9 moreShow less
securitytracker.com/id?1014988
docs.info.apple.com/article.html?artnum=306172
marc.info?l=bugtraq&m=112801672520766&w=2
exchange.xforce.ibmcloud.com/vulnerabilities/22453
secunia.com/advisories/16987
nvd.nist.gov/vuln/detail/CVE-2005-3128
github.com/advisories/GHSA-mq36-cw38-g8hv