SquirrelMail Cross-Site Scripting Vulnerability (CNVD-2018-17524)

SquirrelMail is a cross-platform use of PHP4 development Webmail mail system . A cross-site scripting vulnerability exists in the email message display page in SquirrelMail 1.4.22 and earlier versions. This vulnerability can be exploited by remote attackers to inject malicious scripts into a web...

CVE-2018-14952

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "maction xlink:href=" attack...

CVE-2018-14950: Improper Neutralization of Input During Web Page Generation

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "...

CVE-2018-14955: Improper Neutralization of Input During Web Page Generation

The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations animate to attribute...

CVE-2018-14952: Improper Neutralization of Input During Web Page Generation

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "...

CVE-2018-14951: Improper Neutralization of Input During Web Page Generation

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "...

CVE-2018-14953: Improper Neutralization of Input During Web Page Generation

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "...

CVE-2018-14954: Improper Neutralization of Input During Web Page Generation

The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute...

PT-2018-12827

Name of the Vulnerable Software and Affected Versions SquirrelMail versions prior to 1.4.23 Description The issue concerns a problem with the mail message display page, where an XSS attack can be performed using a specific type of input, such as a "form action='data:text" attack. Recommendations...

PT-2018-12829

Name of the Vulnerable Software and Affected Versions SquirrelMail versions prior to 1.4.23 Description The issue concerns a problem with the mail message display page, where an XSS attack can be performed using a specific type of input, namely a "math xlink:href=" attack. Recommendations For...

PT-2018-12826

Name of the Vulnerable Software and Affected Versions SquirrelMail versions prior to 1.4.23 Description The issue concerns a problem with the mail message display page, where an XSS attack can be performed using a specific vector involving an svg tag and an xlink:href attribute. Recommendations F...

PT-2018-12830

Name of the Vulnerable Software and Affected Versions SquirrelMail versions prior to 1.4.23 Description The issue affects the mail message display page, where an XSS attack can be performed via the formaction attribute. Recommendations For versions prior to 1.4.23, update to version 1.4.23 or lat...

PT-2018-12828

Name of the Vulnerable Software and Affected Versions SquirrelMail versions prior to 1.4.23 Description The issue concerns a problem with the mail message display page, where an XSS attack can be performed using a specific input, such as a "maction xlink:href=" attack. Recommendations For...