SquirrelMail多个表单跨站请求伪造漏洞

CVECAN ID: CVE-2009-2964 SquirrelMail是一款PHP编写的WEBMAIL程序。 SquirrelMail没有正确地过滤用户向多个表单（发送消息、更改偏好等）所提交的内容，远程攻击者可以通过跨站请求伪造攻击执行删除邮件、发送邮件等操作。以下是受影响的页面： functions/mailboxdisplay.php src/addrbooksearchhtml.php src/addressbook.php src/compose.php src/folders.php src/folderscreate.php src/foldersdelete.php...

SquirrelMail Multiple CSRF Vulnerabilities

SquirrelMail is prone to multiple cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2009-2964

Multiple cross-site request forgery CSRF vulnerabilities in SquirrelMail 1.4.19 and earlier, and NaSMail before 1.7, allow remote attackers to hijack the authentication of unspecified victims via features such as send message and change preferences, related to 1 functions/mailboxdisplay.php, 2...

CVE-2009-2964

Multiple cross-site request forgery CSRF vulnerabilities in SquirrelMail 1.4.19 and earlier, and NaSMail before 1.7, allow remote attackers to hijack the authentication of unspecified victims via features such as send message and change preferences, related to 1 functions/mailboxdisplay.php, 2...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in SquirrelMail 1.4.19 and earlier, and NaSMail before 1.7, allow remote attackers to hijack the authentication of unspecified victims via features such as send message and change preferences, related to 1 functions/mailboxdisplay.php, 2...

CVE-2009-2964

Multiple cross-site request forgery CSRF vulnerabilities in SquirrelMail 1.4.19 and earlier, and NaSMail before 1.7, allow remote attackers to hijack the authentication of unspecified victims via features such as send message and change preferences, related to 1 functions/mailboxdisplay.php, 2...

CVE-2009-2964

CVE-2009-2964 : Multiple CSRF vulnerabilities in SquirrelMail 1.4.19 and earlier, and NasMail before 1.7, allow remote attackers to hijack user authentication via various forms (send message, change preferences, etc.). Affected components include numerous PHP scripts (functions/mailbox_display.ph...

Fedora 11 : squirrelmail-1.4.19-2.fc11 (2009-8822)

Implemented page referal verification mechanism. Secunia Advisory SA34627 - Implemented security token system. Secunia Advisory SA34627 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 10 : squirrelmail-1.4.19-2.fc10 (2009-8797)

Implemented page referal verification mechanism. Secunia Advisory SA34627 - Implemented security token system. Secunia Advisory SA34627 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

[SECURITY] Fedora 11 Update: squirrelmail-1.4.19-2.fc11

SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no Javascript for maximum compatibility across browsers. It has very few requirements and is very easy to configure and instal...

[SECURITY] Fedora 10 Update: squirrelmail-1.4.19-2.fc10

SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no Javascript for maximum compatibility across browsers. It has very few requirements and is very easy to configure and instal...

FreeBSD Ports: squirrelmail-multilogin-plugin

The remote host is missing an update to the system as announced in the referenced advisory. VID 0d0237d0-7f68-11de-984d-0011098ad87f OpenVAS Vulnerability Test $ Description: Auto generated from VID 0d0237d0-7f68-11de-984d-0011098ad87f Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

FreeBSD Ports: squirrelmail-multilogin-plugin

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

SquirrelMail < 1.4.20 Multiple Vulnerabilities

Binary data 5147.prm...

FreeBSD : SquirrelMail -- Plug-ins compromise (0d0237d0-7f68-11de-984d-0011098ad87f)

The SquirrelMail Web Server has been compromised, and three plugins are affected. The port of squirrelmail-sasql-plugin is safe right MD5, and changepass is not in the FreeBSD ports tree, but multilogin has a wrong MD5. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

SquirrelMail -- Plug-ins compromise

Problem Description: The SquirrelMail Web Server has been compromised, and three plugins are affected. The port of squirrelmail-sasql-plugin is safe right MD5, and changepass is not in the FreeBSD ports tree, but multilogin has a wrong MD5...

RedHat Security Advisory RHSA-2009:1066

The remote host is missing updates announced in advisory RHSA-2009:1066. A server-side code injection flaw was found in the SquirrelMail mapypalias function. If SquirrelMail was configured to retrieve a user's IMAP server address from a Network Information Service NIS server via the mapypalias...

CentOS Security Advisory CESA-2009:1066 (squirrelmail)

The remote host is missing updates to squirrelmail announced in advisory CESA-2009:1066. CESA-2009:1066 64123 4 $Id: ovcesa20091066.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1066 squirrelmail Authors: Thomas Reinke Copyright: Copyright c 2009...

CentOS Security Advisory CESA-2009:1066 (squirrelmail)

The remote host is missing updates to squirrelmail announced in advisory CESA-2009:1066. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Fedora Core 9 FEDORA-2009-5471 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory FEDORA-2009-5471. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...