SquirrelMail 1.2.6/1.2.7 - Cross-Site Scripting

The Virtual Keyboard plugin for SquirrelMail 1.2.6/1.2.7 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. id: CVE-2002-1131 info: name: SquirrelMail 1.2.6/1.2.7 - Cross-Site Scripting author: dhiyaneshDk,s4e-io severity: high description:...

Debian Security Advisory DSA 191-2 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory DSA 191-2. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2002-1131

The SquirrelMail webmail package (versions 1.2.6/1.2.7 and earlier) is vulnerable to Cross-Site Scripting (XSS) due to insufficient sanitization of user-supplied input. Specifically, the Virtual Keyboard plugin and the addressbook.php , options.php , search.php , and help.php files are affected. ...

CVE-2002-1131

Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via 1 addressbook.php, 2 options.php, 3 search.php, or 4 help.php...