1281 matches found
CVE-2018-14951
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "form action='data:text" attack...
CVE-2018-14955
The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations animate to attribute...
CVE-2018-14954
The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute...
CVE-2018-14952
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "maction xlink:href=" attack...
UBUNTU-CVE-2018-14952
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "maction xlink:href=" attack...
CVE-2018-14953
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "math xlink:href=" attack...
CVE-2018-14950
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "a xlink:href=" attack...
Code injection
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "form action='data:text" attack...
CVE-2018-14955
The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations animate to attribute...
UBUNTU-CVE-2018-14954
The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute...
UBUNTU-CVE-2018-14951
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "form action='data:text" attack...
UBUNTU-CVE-2018-14955
The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations animate to attribute...
UBUNTU-CVE-2018-14950
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "a xlink:href=" attack...
CVE-2018-14954
The CVE-2018-14954 issue concerns SquirrelMail up to version 1.4.22, where Cross‑Site Scripting (XSS) is possible via the formaction attribute on the mail message display page. Public disclosures in Debian indicate this is among several XSS flaws affecting SquirrelMail and note a fix in Debian 8:...
CVE-2018-14953
CVE-2018-14953 affects SquirrelMail up to version 1.4.22, where the mail display page is vulnerable to XSS via crafted content (notably vectors involving and related elements). Debian security advisory confirms multiple XSS CVEs including CVE-2018-14953 and notes that fixes are available in squi...
CVE-2018-14952
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "maction xlink:href=" attack...
CVE-2018-14952
CVE-2018-14952 affects SquirrelMail up to 1.4.22 with XSS via crafted HTML payloads on the mail display page (e.g., ). Debian’s DLA-1484-1 notes fixed package squirrelmail 2:1.4.23~svn20120406-2+deb8u3 for Jessie, indicating remediation via upgrade. The connected Nessus/OpenVAS entries confirm un...
CVE-2018-14950
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "a xlink:href=" attack...