Vulnerabilities

TI-2012-03975 CVE-2012-4667 · GHSA-68rm-9q2m-3j7p

Multiple cross-site scripting (XSS) vulnerabilities in SquidClamav 5.x before 5.8 allow…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in SquidClamav 5.x before 5.8 allow remote attackers to inject arbitrary web script or HTML via the (1) url, (2) virus, (3) source, or (4) user parameter to (a) clwarn.…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01822 Published 2012-08-25 No fix listed CWE-79

TI-2012-03029 CVE-2012-3501 · GHSA-88mf-3qc6-6m7p

The squidclamav_check_preview_handler function in squidclamav.c in SquidClamav 5.x before…

LOW 29

The squidclamav_check_preview_handler function in squidclamav.c in SquidClamav 5.x before 5.8 and 6.x before 6.7 passes an unescaped URL to a system command call, which allows remote attackers to cause a denial of servic…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03333 Published 2012-08-25 No fix listed CWE-119

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in SquidClamav 5.x before 5.8 allow…

The squidclamav_check_preview_handler function in squidclamav.c in SquidClamav 5.x before…