CVE-2009-0413 - roundcubemail: Remotely exploitable web script or HTML code injection vulnerability via the background attribute embedded in an HTML e-mail message (XSS)

Back Back to CVE browser

MEDIUM

roundcubemail: Remotely exploitable web script or HTML code injection vulnerability via the background attribute embedded in an HTML e-mail message (XSS)

Published Feb 3, 2009

4.3

MEDIUM

CVSS 2.0

EPSS 1.98%

Description

Cross-site scripting (XSS) vulnerability in RoundCube Webmail (roundcubemail) 0.2 stable allows remote attackers to inject arbitrary web script or HTML via the background attribute embedded in an HTML e-mail message.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (12)

http://secunia.com/advisories/33622
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/33827
third-party-advisoryx_refsource_SECUNIA
http://trac.roundcube.net/changeset/2245
x_refsource_CONFIRM
http://www.securityfocus.com/bid/33372
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2009/0192
vdb-entryx_refsource_VUPEN
https://access.redhat.com/security/cve/CVE-2009-0413
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=484052
Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0417
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/48129
vdb-entryx_refsource_XF
https://nvd.nist.gov/vuln/detail/CVE-2009-0413
https://www.cve.org/CVERecord?id=CVE-2009-0413
https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00082.html
vendor-advisoryx_refsource_FEDORA

Link	Providers	Tags
http://secunia.com/advisories/33622		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/33827		third-party-advisoryx_refsource_SECUNIA
http://trac.roundcube.net/changeset/2245		x_refsource_CONFIRM
http://www.securityfocus.com/bid/33372		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2009/0192		vdb-entryx_refsource_VUPEN
https://access.redhat.com/security/cve/CVE-2009-0413		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=484052		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0417		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/48129		vdb-entryx_refsource_XF
https://nvd.nist.gov/vuln/detail/CVE-2009-0413
https://www.cve.org/CVERecord?id=CVE-2009-0413
https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00082.html		vendor-advisoryx_refsource_FEDORA