SquirrelMail Cross-Site Scripting Vulnerability (CNVD-2019-19609)

SquirrelMail is a cross-platform use of PHP4 development Webmail mail system . A cross-site scripting vulnerability exists in the email message display page of SquirrelMail 1.4.22 and earlier versions, which can be exploited by remote attackers to inject malicious scripts into a web page and...

SquirrelMail Cross-Site Scripting Vulnerability (CNVD-2019-19608)

SquirrelMail is a cross-platform use of PHP4 development Webmail mail system . A cross-site scripting vulnerability exists in the email message display page in SquirrelMail 1.4.22 and earlier versions, which can be exploited by remote attackers to inject malicious scripts into a web page and...

SquirrelMail < 1.4.23 Multiple XSS Vulnerabilities

SquirrelMail is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

CVE-2018-14951

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "form action='data:text" attack...

Code injection

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "math xlink:href=" attack...

CVE-2018-14954

The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute...

CVE-2018-14952

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "maction xlink:href=" attack...

Code injection

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "maction xlink:href=" attack...

Design/Logic Flaw

The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations animate to attribute...

UBUNTU-CVE-2018-14955

The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations animate to attribute...

CVE-2018-14954

The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute...

CVE-2018-14950

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "a xlink:href=" attack...

CVE-2018-14955

The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations animate to attribute...

CVE-2018-14955

The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations animate to attribute...

CVE-2018-14953

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "math xlink:href=" attack...

CVE-2018-14950

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "a xlink:href=" attack...

CVE-2018-14951

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "form action='data:text" attack...

CVE-2018-14954

The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute...

CVE-2018-14953

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "math xlink:href=" attack...

CVE-2018-14953

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "math xlink:href=" attack...