CVE-2019-12970

XSS was discovered in SquirrelMail through 1.4.22 and 1.5.x through 1.5.2. Due to improper handling of RCDATA and RAWTEXT type elements, the built-in sanitization mechanism can be bypassed. Malicious script content from HTML e-mail can be executed within the application context via crafted use of...

SquirrelMail 1.4.22 Cross Site Scripting

Advisory ID: SYSS-2019-016 Product: SquirrelMail Manufacturer: The SquirrelMail Project Affected Versions: 1.4.22, SVN Tested Versions: SVN Vulnerability Type: Cross-Site Scripting CWE-79 Risk Level: Medium Solution Status: Open Manufacturer Notification: 2019-04-17 Solution Date: N/A Public...

MGASA-2019-0136 Updated squirrelmail packages fix security vulnerability

Updated squirellmail packages to fix a XSS-security issue...

Updated squirrelmail packages fix security vulnerability

Updated squirellmail packages to fix a XSS-security issue...

Denial Of Service

SquirrelMail is vulnerable to denial of service attack.For log in attempts with 8-bit character passwords, the library creates user preference file even if the user name is invalid. Using this flaw, an attacker can exhaust memory in server by making many invalid IMAP log in attempts with differen...

Debian: Security Advisory (DLA-1484-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated squirrelmail packages fix XSS-security vulnerability

Updated squirrelmail packages fix XSS-security vulnerability: It was discovered that some special tags have not been filtered accordingly which can be used for an XSS-attack...

MGASA-2018-0357 Updated squirrelmail packages fix XSS-security vulnerability

Updated squirrelmail packages fix XSS-security vulnerability: It was discovered that some special tags have not been filtered accordingly which can be used for an XSS-attack...

Debian DLA-1484-1 : squirrelmail security update

It was discovered that there were a number of Cross Site Scripting XSS vulnerabilities in the squirrelmail webmail client. For Debian 8 'Jessie', these issues has been fixed in squirrelmail version 2:1.4.23svn20120406-2+deb8u3. We recommend that you upgrade your squirrelmail packages. NOTE: Tenab...

[SECURITY] [DLA 1484-1] squirrelmail security update

Package : squirrelmail Version : 2:1.4.23svn20120406-2+deb8u3 CVE IDs : CVE-2018-14950 CVE-2018-14951 CVE-2018-14952 CVE-2018-14953 CVE-2018-14954 CVE-2018-14955 Debian Bug : 905023 It was discovered that there were a number of Cross Site Scripting XSS vulnerabilities in the squirrelmail webmail...

DLA-1484-1 squirrelmail - security update

Bulletin has no description...

CVE-2018-14951

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "form action='data:text" attack...

CVE-2018-14950

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "a xlink:href=" attack...

CVE-2018-14953

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "math xlink:href=" attack...

CVE-2018-14952

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "maction xlink:href=" attack...

CVE-2018-14954

The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute...

SquirrelMail Cross-Site Scripting Vulnerability (CNVD-2018-17525)

SquirrelMail is a cross-platform use of PHP4 development Webmail mail system . A cross-site scripting vulnerability exists in the email message display page in SquirrelMail 1.4.22 and earlier versions. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

SquirrelMail Cross-Site Scripting Vulnerability (CNVD-2019-19610)

SquirrelMail is a cross-platform use of PHP4 development Webmail mail system . A cross-site scripting vulnerability exists in the email message display page of SquirrelMail 1.4.22 and earlier versions, which can be exploited by remote attackers to inject malicious scripts into a web page and...

SquirrelMail cross-site scripting vulnerability (CNVD-2019-19607)

SquirrelMail is a PHP-based Web e-mail client . A cross-site scripting vulnerability exists in the email message display page in SquirrelMail 1.4.22 and earlier versions, which can be exploited by a remote attacker to inject malicious scripts into a web page and execute those scripts in a user's...

SquirrelMail Cross-Site Scripting Vulnerability (CNVD-2018-17524)

SquirrelMail is a cross-platform use of PHP4 development Webmail mail system . A cross-site scripting vulnerability exists in the email message display page in SquirrelMail 1.4.22 and earlier versions. This vulnerability can be exploited by remote attackers to inject malicious scripts into a web...