SquirrelMail Cross-Site Scripting Vulnerability (CNVD-2018-17525)

SquirrelMail is a cross-platform use of PHP4 development Webmail mail system . A cross-site scripting vulnerability exists in the email message display page in SquirrelMail 1.4.22 and earlier versions. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

SquirrelMail Cross-Site Scripting Vulnerability (CNVD-2019-19608)

SquirrelMail is a cross-platform use of PHP4 development Webmail mail system . A cross-site scripting vulnerability exists in the email message display page in SquirrelMail 1.4.22 and earlier versions, which can be exploited by remote attackers to inject malicious scripts into a web page and...

SquirrelMail Cross-Site Scripting Vulnerability (CNVD-2019-19609)

SquirrelMail is a cross-platform use of PHP4 development Webmail mail system . A cross-site scripting vulnerability exists in the email message display page of SquirrelMail 1.4.22 and earlier versions, which can be exploited by remote attackers to inject malicious scripts into a web page and...

SquirrelMail Cross-Site Scripting Vulnerability (CNVD-2018-17524)

SquirrelMail is a cross-platform use of PHP4 development Webmail mail system . A cross-site scripting vulnerability exists in the email message display page in SquirrelMail 1.4.22 and earlier versions. This vulnerability can be exploited by remote attackers to inject malicious scripts into a web...

SquirrelMail cross-site scripting vulnerability (CNVD-2019-19607)

SquirrelMail is a PHP-based Web e-mail client . A cross-site scripting vulnerability exists in the email message display page in SquirrelMail 1.4.22 and earlier versions, which can be exploited by a remote attacker to inject malicious scripts into a web page and execute those scripts in a user's...

CVE-2018-14951

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "form action='data:text" attack...

Design/Logic Flaw

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "a xlink:href=" attack...

CVE-2018-14952

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "maction xlink:href=" attack...

CVE-2018-14954

The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute...

CVE-2018-14950

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "a xlink:href=" attack...

CVE-2018-14950

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "a xlink:href=" attack...

CVE-2018-14954

The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute...

CVE-2018-14951

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "form action='data:text" attack...

CVE-2018-14954

The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute...

CVE-2018-14953

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "math xlink:href=" attack...

UBUNTU-CVE-2018-14955

The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations animate to attribute...

CVE-2018-14955

The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations animate to attribute...

Code injection

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "form action='data:text" attack...

CVE-2018-14950

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "a xlink:href=" attack...

CVE-2018-14953

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "math xlink:href=" attack...