Approved changes feed: RSS · Atom

cpe:2.3:a:inter7:sqwebmail:3.5.1:*:*:*:*:*:*:*

part: a version: 3.5.1 update: *

VendorInter7 (4d813d66-ab7f-57bc-8f8e-189314512ba8)
ProductSqwebmail (78c1e3b2-778a-5935-8d6f-fc3d899ac322)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-2724 vulnerable 2026-06-08 04:48:30.387332 Details available
Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or HTML via a file attachment that is processed by the Display feature. NOTE: the severity of this issue has been disputed by the developer.
Published: 2005-08-29T04:00:00.000Z
Updated: 2024-08-07T22:45:02.090Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1308 vulnerable 2026-06-08 04:48:26.316165 Details available
SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter followed by the desired script or HTML.
Published: 2005-04-27T04:00:00.000Z
Updated: 2024-09-17T03:07:18.913Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2313 vulnerable 2026-06-08 04:48:09.231094 Details available
Inter7 SqWebMail 3.4.1 through 3.6.1 generates different error messages for incorrect passwords versus correct passwords on non-mail-enabled accounts (such as root), which allows remote attackers to guess the root password via brute force attacks.
Published: 2005-08-16T04:00:00.000Z
Updated: 2024-08-08T01:22:13.536Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.