2 matches found
CVE-2002-1649
Cross-site scripting XSS vulnerability in readbody.php in SquirrelMail before 1.2.3 allows remote attackers to execute arbitrary Javascript via a javascript: URL in an IMG tag...
SquirrelMail 1.2.9 / 1.2.10 read_body.php Multiple Parameter XSS
The remote host seems to be vulnerable to a security problem in SquirrelMail. The 'readbody.php' script doesn't filter out user input for multiple parameters, allowing for XSS attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script was rewritten by Tenable Network Security, Inc....