11 results · Feed
-
High 7.2
mime.php in SquirrelMail through 1.4.23-svn-20250401 and 1.5.x through 1.5.2-svn-20250401 allows XSS via e-mail headers…
-
Unscored —
compose.php in SquirrelMail 1.4.22 calls unserialize for the $mailtodata value, which originates from an HTTP GET reque…
-
Unscored —
XSS was discovered in SquirrelMail through 1.4.22 and 1.5.x through 1.5.2. Due to improper handling of RCDATA and RAWTE…
-
Unscored —
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<form action='data:text" attack.
-
Unscored —
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<math><maction xlink:href=" attack.
-
Unscored —
The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations (animate to attribute).
-
Unscored —
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<math xlink:href=" attack.
-
Unscored —
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<svg><a xlink:href=" attack.
-
Unscored —
The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute.
-
Unscored —
A directory traversal flaw in SquirrelMail 1.4.22 allows an authenticated attacker to exfiltrate (or potentially delete…
-
Unscored —
SquirrelMail 1.4.22 (and other versions before 20170427_0200-SVN) allows post-authentication remote code execution via …