SquirrelMail Cross-Site Scripting Vulnerability (CNVD-2018-17524)

SquirrelMail is a cross-platform use of PHP4 development Webmail mail system . A cross-site scripting vulnerability exists in the email message display page in SquirrelMail 1.4.22 and earlier versions. This vulnerability can be exploited by remote attackers to inject malicious scripts into a web...

CVE-2018-14952: Improper Neutralization of Input During Web Page Generation

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "...

CVE-2018-14955: Improper Neutralization of Input During Web Page Generation

The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations animate to attribute...

CVE-2018-14950: Improper Neutralization of Input During Web Page Generation

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "...

CVE-2018-14951: Improper Neutralization of Input During Web Page Generation

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "...

CVE-2018-14953: Improper Neutralization of Input During Web Page Generation

The mail message display page in SquirrelMail through 1.4.22 has XSS via a "...

CVE-2018-14954: Improper Neutralization of Input During Web Page Generation

The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute...