Unscored CVE-2002-1649 EUVD-2002-1630GHSA-cf6m-prqc-77x3

Cross-site scripting (XSS) vulnerability in read_body.php in SquirrelMail before 1.2.3 allows remote attackers to execute arbitrary Javascr…

Published Mar 28, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in read_body.php in SquirrelMail before 1.2.3 allows remote attackers to execute arbitrary Javascript via a javascript: URL in an IMG tag.

References

squirrelmail-html-execute-script(7989) vdb-entry
VU#153043 third-party-advisory
3956 vdb-entry
20020124 Vulnerabilities in squirrelmail mailing-list