CVE-2005-3128

The SquirrelMail Address Add Plugin (versions 1.4.2 , 1.9 , and 2.0 ) is vulnerable to a cross-site scripting (XSS) flaw in the add.php file. The root cause is a failure to properly sanitize user-supplied input, specifically allowing remote attackers to inject arbitrary web scripts or HTML via th...