EUVD-2018-6834

Malware in sbrugna...

RHEL 5 : squirrelmail (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - squirrelmail: Insufficient escaping of user-supplied data CVE-2017-7692 - SquirrelMail: Directory travers...

CVE-2018-14955

The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations animate to attribute...

CVE-2018-14954

The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute...

CVE-2018-14950

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "a xlink:href=" attack...

CVE-2018-14952

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "maction xlink:href=" attack...

CVE-2018-14950: Improper Neutralization of Input During Web Page Generation

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "...

CVE-2018-14954: Improper Neutralization of Input During Web Page Generation

The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute...

CVE-2018-14955: Improper Neutralization of Input During Web Page Generation

The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations animate to attribute...

CVE-2018-14952: Improper Neutralization of Input During Web Page Generation

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "...

CVE-2018-14951: Improper Neutralization of Input During Web Page Generation

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "...

CVE-2018-14953: Improper Neutralization of Input During Web Page Generation

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "...

PT-2018-12827

Name of the Vulnerable Software and Affected Versions SquirrelMail versions prior to 1.4.23 Description The issue concerns a problem with the mail message display page, where an XSS attack can be performed using a specific type of input, such as a "form action='data:text" attack. Recommendations...

PT-2018-12829

Name of the Vulnerable Software and Affected Versions SquirrelMail versions prior to 1.4.23 Description The issue concerns a problem with the mail message display page, where an XSS attack can be performed using a specific type of input, namely a "math xlink:href=" attack. Recommendations For...

PT-2018-12826

Name of the Vulnerable Software and Affected Versions SquirrelMail versions prior to 1.4.23 Description The issue concerns a problem with the mail message display page, where an XSS attack can be performed using a specific vector involving an svg tag and an xlink:href attribute. Recommendations F...

PT-2018-12830

Name of the Vulnerable Software and Affected Versions SquirrelMail versions prior to 1.4.23 Description The issue affects the mail message display page, where an XSS attack can be performed via the formaction attribute. Recommendations For versions prior to 1.4.23, update to version 1.4.23 or lat...

PT-2018-12828

Name of the Vulnerable Software and Affected Versions SquirrelMail versions prior to 1.4.23 Description The issue concerns a problem with the mail message display page, where an XSS attack can be performed using a specific input, such as a "maction xlink:href=" attack. Recommendations For...