Skip to content
OpenAdvisories
Unscored DSA-191 3 CVEs

squirrelmail - cross site scripting

Published Nov 7, 2002 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 3.0 squirrelmail 1.2.6-1.1

Vulnerabilities 3

  • Unscored —
    CVE-2002-1131 Public exploit EPSS 26%

    Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as oth…

  • Unscored —
    CVE-2002-1132

    SquirrelMail 1.2.7 and earlier allows remote attackers to determine the absolute pathname of the options.php script via…

  • Unscored —
    CVE-2002-1276

    An incomplete fix for a cross-site scripting (XSS) vulnerability in SquirrelMail 1.2.8 calls the strip_tags function on…