PT-2011-1603

Name of the Vulnerable Software and Affected Versions SquirrelMail versions 1.4.21 and earlier Description The issue allows remote attackers to conduct clickjacking attacks via a crafted web site, as the functions/page header.php file does not prevent page rendering inside a frame in a third-part...

CVE-2010-4554: Improper Input Validation

functions/pageheader.php in SquirrelMail 1.4.21 and earlier does not prevent page rendering inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...