Show filters
73 Total Results
Displaying 61-70 of 73
Sort by:
Attacker Value
Unknown
CVE-2004-0519
Disclosure Date: August 18, 2004 (last updated February 22, 2025)
Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via multiple attack vectors, including the mailbox parameter in compose.php.
0
Attacker Value
Unknown
CVE-2004-0639
Disclosure Date: August 06, 2004 (last updated February 22, 2025)
Multiple cross-site scripting (XSS) vulnerabilities in Squirrelmail 1.2.10 and earlier allow remote attackers to inject arbitrary HTML or script via (1) the $mailer variable in read_body.php, (2) the $senderNames_part variable in mailbox_display.php, and possibly other vectors including (3) the $event_title variable or (4) the $event_text variable.
0
Attacker Value
Unknown
CVE-2003-0160
Disclosure Date: April 02, 2003 (last updated February 22, 2025)
Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.2.11 allow remote attackers to inject arbitrary HTML code and steal information from a client's web browser.
0
Attacker Value
Unknown
CVE-2002-1648
Disclosure Date: December 31, 2002 (last updated February 22, 2025)
Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail before 1.2.3 allows remote attackers to send email as other users via an IMG URL with modified send_to and subject parameters.
0
Attacker Value
Unknown
CVE-2002-1650
Disclosure Date: December 31, 2002 (last updated February 22, 2025)
The spell checker plugin (check_me.mod.php) for SquirrelMail before 1.2.3 allows remote attackers to execute arbitrary commands via a modified sqspell_command parameter.
0
Attacker Value
Unknown
CVE-2002-1649
Disclosure Date: December 31, 2002 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in read_body.php in SquirrelMail before 1.2.3 allows remote attackers to execute arbitrary Javascript via a javascript: URL in an IMG tag.
0
Attacker Value
Unknown
CVE-2002-2086
Disclosure Date: December 31, 2002 (last updated February 22, 2025)
Multiple cross-site scripting (XSS) vulnerabilities in magicHTML of SquirrelMail before 1.2.6 allow remote attackers to inject arbitrary web script or HTML via (1) "<<script" in unspecified input fields or (2) a javascript: URL in the src attribute of an IMG tag.
0
Attacker Value
Unknown
CVE-2002-1341
Disclosure Date: December 18, 2002 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in read_body.php for SquirrelMail 1.2.10, 1.2.9, and earlier allows remote attackers to insert script and HTML via the (1) mailbox and (2) passed_id parameters.
0
Attacker Value
Unknown
CVE-2002-1276
Disclosure Date: November 29, 2002 (last updated February 22, 2025)
An incomplete fix for a cross-site scripting (XSS) vulnerability in SquirrelMail 1.2.8 calls the strip_tags function on the PHP_SELF value but does not save the result back to that variable, leaving it open to cross-site scripting attacks.
0
Attacker Value
Unknown
CVE-2002-1131
Disclosure Date: October 04, 2002 (last updated February 22, 2025)
Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via (1) addressbook.php, (2) options.php, (3) search.php, or (4) help.php.
0
