Page 8 of 41 results (0.008 seconds)

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 1

CVE-2002-1649

https://notcve.org/view.php?id=CVE-2002-1649

Cross-site scripting (XSS) vulnerability in read_body.php in SquirrelMail before 1.2.3 allows remote attackers to execute arbitrary Javascript via a javascript: URL in an IMG tag. • http://archives.neohapsis.com/archives/bugtraq/2002-01/0310.html http://www.kb.cert.org/vuls/id/153043 http://www.securityfocus.com/bid/3956 https://exchange.xforce.ibmcloud.com/vulnerabilities/7989 •

CVSS: 7.5EPSS: 2%CPEs: 1EXPL: 1

CVE-2002-1650

https://notcve.org/view.php?id=CVE-2002-1650

The spell checker plugin (check_me.mod.php) for SquirrelMail before 1.2.3 allows remote attackers to execute arbitrary commands via a modified sqspell_command parameter. • http://archives.neohapsis.com/archives/bugtraq/2002-01/0296.html http://archives.neohapsis.com/archives/bugtraq/2002-01/0306.html https://exchange.xforce.ibmcloud.com/vulnerabilities/7990 •

CVSS: 4.3EPSS: 1%CPEs: 6EXPL: 1

CVE-2002-2086

https://notcve.org/view.php?id=CVE-2002-2086

Multiple cross-site scripting (XSS) vulnerabilities in magicHTML of SquirrelMail before 1.2.6 allow remote attackers to inject arbitrary web script or HTML via (1) "<<script" in unspecified input fields or (2) a javascript: URL in the src attribute of an IMG tag. • http://sourceforge.net/tracker/index.php?func=detail&aid=544658&group_id=311&atid=100311 http://sourceforge.net/tracker/index.php?func=detail&aid=545933&group_id=311&atid=100311 http://www.securityfocus.com/bid/4666 http://www.securityfocus.com/bid/4667 http://www.squirrelmail.org/changelog.php https://exchange.xforce.ibmcloud.com/vulnerabilities/9008 https://exchange.xforce.ibmcloud.com/vulnerabilities/9009 •

CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 1

CVE-2002-1132

https://notcve.org/view.php?id=CVE-2002-1132

SquirrelMail 1.2.7 and earlier allows remote attackers to determine the absolute pathname of the options.php script via a malformed optpage file argument, which generates an error message when the file cannot be included in the script. • http://archives.neohapsis.com/archives/bugtraq/2002-09/0246.html http://www.debian.org/security/2002/dsa-191 http://www.iss.net/security_center/static/10345.php http://www.redhat.com/support/errata/RHSA-2002-204.html http://www.securityfocus.com/bid/5949 •

CVSS: 7.5EPSS: 4%CPEs: 1EXPL: 3

CVE-2002-1131 – SquirrelMail 1.2.6/1.2.7 - Multiple Cross-Site Scripting Vulnerabilities

https://notcve.org/view.php?id=CVE-2002-1131

Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via (1) addressbook.php, (2) options.php, (3) search.php, or (4) help.php. • https://www.exploit-db.com/exploits/21811 http://archives.neohapsis.com/archives/bugtraq/2002-09/0246.html http://sourceforge.net/project/shownotes.php?group_id=311&release_id=110774 http://www.debian.org/security/2002/dsa-191 http://www.iss.net/security_center/static/10145.php http://www.redhat.com/support/errata/RHSA-2002-204.html http://www.securityfocus.com/bid/5763 •