1361 matches found
SquirrelMail Address Add 1.4.2 - Cross-Site Scripting
SquirrelMail Address Add 1.4.2 plugin contains a cross-site scripting vulnerability. It fails to properly sanitize user-supplied input, thus allowing an attacker to execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to...
SquirrelMail 1.2.6/1.2.7 - Cross-Site Scripting
The Virtual Keyboard plugin for SquirrelMail 1.2.6/1.2.7 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. id: CVE-2002-1131 info: name: SquirrelMail 1.2.6/1.2.7 - Cross-Site Scripting author: dhiyaneshDk,s4e-io severity: high description:...
Squirrelmail <=1.4.6 - Local File Inclusion
SquirrelMail 1.4.6 and earlier versions are susceptible to a PHP local file inclusion vulnerability in functions/plugin.php if registerglobals is enabled and magicquotesgpc is disabled. This allows remote attackers to execute arbitrary PHP code via a URL in the plugins array parameter. id:...
SquirrelMail 1.4.x - Folder Name Cross-Site Scripting
Multiple cross-site scripting XSS vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script and possibly steal authentication information via multiple attack vectors, including the mailbox parameter in compose.php. id: CVE-2004-0519 info: name: SquirrelMail 1.4.x -...
VulnCheck KEV: CVE-2017-7692
SquirrelMail 1.4.22 and other versions before 201704270200-SVN allows post-authentication remote code execution via a sendmail.cf file that is mishandled in a popen call. It's possible to exploit this vulnerability to execute arbitrary shell commands on the remote server. The problem is in the...
The vulnerability in the mime.php script of the web client for open-source SquirrelMail allows attackers to execute XSS attacks.
The vulnerability in the mime.php script of the email web client for the open-source SquirrelMail framework exists due to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform XSS attacks remotely...
MiracleLinux 3 : squirrelmail-1.4.8-5.7AXS3 (AXSA:2009-60:01)
The remote MiracleLinux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2009-60:01 advisory. SquirrelMail is a standards-based webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all page...
MiracleLinux 3 : squirrelmail-1.4.8-21.AXS3 (AXSA:2013-274:01)
The remote MiracleLinux 3 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2013-274:01 advisory. SquirrelMail is a standards-based webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render...
MiracleLinux 3 : squirrelmail-1.4.8-5.1AXS3.2 (AXSA:2009-11:01)
The remote MiracleLinux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2009-11:01 advisory. SquirrelMail is a standards-based webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all page...
MiracleLinux 3 : squirrelmail-1.4.8-5.3AXS3 (AXSA:2009-17:02)
The remote MiracleLinux 3 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2009-17:02 advisory. SquirrelMail is a standards-based webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render ...
MiracleLinux 3 : squirrelmail-1.4.8-5.10AXS3 (AXSA:2009-409:02)
The remote MiracleLinux 3 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2009-409:02 advisory. SquirrelMail is a standards-based webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render...
EUVD-2009-0042
Malware in sbrugna...
EUVD-2018-6837
Malware in sbrugna...
EUVD-2005-0153
Malware in sbrugna...
EUVD-2004-0638
Malware in sbrugna...
EUVD-2005-0105
Malware in sbrugna...
EUVD-2004-0523
Malware in sbrugna...
EUVD-2018-6835
Malware in sbrugna...