Description
Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.2.11 allow remote attackers to inject arbitrary HTML code and steal information from a client's web browser.
References
- http://sourceforge.net/mailarchive/forum.php?thread_id=1641953&forum_id=1988
- RHSA-2003:112 vendor-advisory
- oval:org.mitre.oval:def:614 vdb-entry signature