Debian DSA-220-1 : squirrelmail - XSS

A cross site scripting vulnerability has been discovered in squirrelmail, a feature-rich webmail package written in PHP4. Squirrelmail doesn't sanitize user provided variables in all places, leaving it vulnerable to a cross site scripting attack. %NASLMINLEVEL 70300 C Tenable Network Security, In...

CVE-2002-1341

...

CVE-2002-1341

Cross-site scripting XSS vulnerability in readbody.php for SquirrelMail 1.2.10, 1.2.9, and earlier allows remote attackers to insert script and HTML via the 1 mailbox and 2 passedid parameters...

CVE-2002-1341

CVE-2002-1341 affects SquirrelMail 1.2.9/1.2.10 and earlier, with an XSS flaw in read_body.php that allows remote attackers to inject script/HTML via mailbox and passed_id parameters. Connected advisories confirm this is a cross-site scripting issue (CVSS v2 base 6.8; vector AV:N/AC:M/Au:N/C:P/I:...

CVE-2002-1341

Cross-site scripting XSS vulnerability in readbody.php for SquirrelMail 1.2.10, 1.2.9, and earlier allows remote attackers to insert script and HTML via the 1 mailbox and 2 passedid parameters...