Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.3

SqWebMail 5.0.4 can run malicious code from crafted email

CVE-2005-2820 · published 21 years ago
Summary

A specially crafted email can place hidden code into SqWebMail 5.0.4, causing the web interface to execute that code when the message is viewed. This could let an attacker steal information or take actions as the logged‑in user. Apply the vendor's update or block such emails with a web filter until the software is patched.

What to do
  • Update debian courier to version 0.47-9.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian courier < 0.47-9
Fix: upgrade to 0.47-9
Debian:13 debian courier < 0.47-9
Fix: upgrade to 0.47-9
Debian:14 debian courier < 0.47-9
Fix: upgrade to 0.47-9
– inter7 sqwebmail 5.0.4
cpe:2.3:a:inter7:sqwebmail:5.0.4:*:*:*:*:*:*:*
Original advisory text
Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or HTML via an e-mail message containing Internet Explorer "Conditional Comments" ...
Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or HTML via an e-mail message containing Internet Explorer "Conditional Comments" such as "[if]" and "[endif]".
References
Severity
4.3 Medium
Exploitation
2% chance of attack within 30 days
Timeline
Published7 Sep 2005
Updated4 Nov 2026
First seen8 Sep 2026
Sources
DEBIAN-CVE-2005-2820 · OSV
CVE-2005-2820 · NVD
Track software like this
Free during beta