Fedora Update for squirrelmail FEDORA-2007-089

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2008-6142

CVE-2008-6142 involves multiple SQL injection vulnerabilities in admin/usercheck.php within FlexPHPic 0.0.4 and FlexPHPic Pro 0.0.3 (and other 0.0.x versions). The weaknesses allow remote attackers to inject arbitrary SQL via the checkuser (username) or checkpass (password) fields sent to admin/i...

CVE-2008-3415

creationtimestamp| type| source ---|---|--- 2008-07-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6142...

CVE-2007-6142

Multiple cross-site scripting XSS vulnerabilities in ph03y3nk just another flat file JAF CMS 4.0 RC2 allow remote attackers to inject arbitrary web script or HTML via the 1 show parameter to index.php and the 2 print parameter to print.php. NOTE: the provenance of this information is unknown; the...

CVE-2007-6142

The CVE affects ph03y3nk just another flat file (JAF) CMS 4.0 RC2. It describes reflected Cross‑Site Scripting via the index.php show parameter and the print.php print parameter, enabling injection of arbitrary web script/HTML. The root cause is input handling in these two parameters leading to s...

openSUSE 10 Security Update : squirrelmail (squirrelmail-2409)

Multiple cross site scripting bugs in squirrelmail have been fixed CVE-2006-6142 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update squirrelmail-2409. The text description of this plugin is C SUS...

openSUSE 10 Security Update : squirrelmail (squirrelmail-2417)

Multiple cross site scripting bugs in squirrelmail have been fixed. CVE-2006-6142 This update is a reissue, fixing some bugs that were introduced by the previous security update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Mac OS X Multiple Vulnerabilities (Security Update 2007-007)

The remote host is running a version of Mac OS X 10.4 or 10.3 which does not have the security update 2007-007 applied. This update contains several security fixes for the following programs : - bzip2 - CFNetwork - CoreAudio - cscope - gnuzip - iChat - Kerberos - mDNSResponder - PDFKit - PHP -...

RHEL 3 / 4 : squirrelmail (RHSA-2007:0022)

A new squirrelmail package that fixes security issues is now available for Red Hat Enterprise Linux 3 and 4. SquirrelMail is a standards-based webmail package written in PHP. Several cross-site scripting bugs were discovered in SquirrelMail. An attacker could inject arbitrary JavaScript or HTML...

Moderate: squirrelmail security update

1.4.8-4.el4.1 - remove banners 1.4.8-4 - Clean up .orig files 223648 1.4.8-3 - CVE-2006-6142...

squirrelmail security update

CentOS Errata and Security Advisory CESA-2007:0022 A new squirrelmail package that fixes security issues is now available for Red Hat Enterprise Linux 3 and 4. SquirrelMail is a standards-based webmail package written in PHP. Several cross-site scripting bugs were discovered in SquirrelMail. An...

Moderate: Red Hat Security Advisory: squirrelmail security update

A new squirrelmail package that fixes security issues is now available for Red Hat Enterprise Linux 3 and 4. SquirrelMail is a standards-based webmail package written in PHP. Several cross-site scripting bugs were discovered in SquirrelMail. An attacker could inject arbitrary Javascript or HTML...

Fedora Core 5 : squirrelmail-1.4.8-3.fc5 (2007-088)

http://squirrelmail.org/security/issue/2006-12-02 CVE-2006-6142 Cross site scripting in compose, draft & HTML mail viewing http://squirrelmail.org/security/issue/2006-12-03 Workaround for Internet Explorer MIME handling Note that Tenable Network Security has extracted the preceding description...

[SECURITY] [DSA 1241-1] New squirrelmail packages fix cross-site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA 1241-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 25th, 2006 http://www.debian.org/security/faq -...

CVE-2006-6142

CVE-2006-6142 covers multiple XSS vulnerabilities in SquirrelMail 1.4.0–1.4.9. Vulnerabilities include injection of arbitrary web script/HTML via the mailto parameter in webmail.php, the session and delete_draft parameters in compose.php, and additional vectors related to a flaw in the magicHTML ...