Lucene search
+L

7 matches found

OSV
OSV
added 2018/08/31 9:11 p.m.5 views

MGASA-2018-0357 Updated squirrelmail packages fix XSS-security vulnerability

Updated squirrelmail packages fix XSS-security vulnerability: It was discovered that some special tags have not been filtered accordingly which can be used for an XSS-attack...

7.2AI score
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2009/05/26 12:0 a.m.36 views

Fedora 9 : squirrelmail-1.4.19-1.fc9 (2009-5471)

Fri May 22 2009 Michal Hlavinka - 1.4.19-1 - updated to 1.4.19 - fixes CVE-2009-1579, CVE-2009-1580, CVE-2009-1581 - Tue May 19 2009 Michal Hlavinka - 1.4.18-2 - fix undefined variable aSpamIds 501260 - Tue May 12 2009 Michal Hlavinka - 1.4.18-1 - update to 1.4.18 fixes CVE-2009-1581 - Thu Dec 4...

6.8CVSS7.2AI score0.03399EPSS
Exploits4References4
Tenable Nessus
Tenable Nessus
added 2004/12/27 12:0 a.m.55 views

RHEL 3 : squirrelmail (RHSA-2004:654)

An updated SquirrelMail package that fixes a cross-site scripting vulnerability is now available. SquirrelMail is a webmail package written in PHP. A cross-site scripting bug has been found in SquirrelMail. This issue could allow an attacker to send a mail with a carefully crafted header, which...

6.8CVSS5.1AI score0.02818EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2004/11/29 12:0 a.m.39 views

Fedora Core 3 : squirrelmail-1.4.3a-6.FC3 (2004-472)

Fri Nov 19 2004 Warren Togami 1.4.3a-6.FC3 - FC3 - Fri Nov 19 2004 Warren Togami 1.4.3a-7 - CVE-2004-1036 Cross Site Scripting in encoded text - 112769 updated splash screens Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

6.8CVSS5.3AI score0.02818EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2004/07/23 12:0 a.m.30 views

Fedora Core 1 : squirrelmail-1.4.3-0.f1.1 (2004-159)

A SQL injection flaw was found in SquirrelMail version 1.4.2 and earlier. If SquirrelMail is configured to store user addressbooks in the database, a remote attacker could use this flaw to execute arbitrary SQL statements. The Common Vulnerabilities and Exposures project has assigned the name...

10CVSS5.5AI score0.22528EPSS
Exploits2References2
Debian
Debian
added 2003/01/02 3:3 p.m.24 views

[SECURITY] [DSA 220-1] New squirrelmail packages fix cross site scripting problem

-------------------------------------------------------------------------- Debian Security Advisory DSA 220-1 [email protected] http://www.debian.org/security/ Martin Schulze January 2nd, 2003 http://www.debian.org/security/faq -...

6.8CVSS0.01967EPSS
Exploits0
Debian
Debian
added 2002/11/11 9:2 a.m.25 views

[SECURITY] [DSA 191-2] New squirrelmail packages fix problem in options page

-------------------------------------------------------------------------- Debian Security Advisory DSA 191-2 [email protected] http://www.debian.org/security/ Martin Schulze November 7th, 2002 http://www.debian.org/security/faq -...

6.4AI score
Exploits3
Rows per page
Query Builder