SquirrelMail strings.php base_uri Parameter Information Disclosure

The version of SquirrelMail installed on the remote host fails to check the origin of the 'baseuri' parameter in the 'functions/strings.php' script before using it to set the path for its cookies. An attacker may be able to leverage this issue to steal cookies associated with the affected...