squirrelmail vulnerabilities (Debian)
41 vulnerabilities.
-
squirrelmailDebian XSS was discovered in SquirrelMail through 1.4.22 and 1.5.x through 1.5.2. Due to improper... 6.1 Medium -
squirrelmailDebian The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations (animate... 6.1 Medium -
squirrelmailDebian The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute. 6.1 Medium -
squirrelmailDebian The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<math xlink:href="... 6.1 Medium -
squirrelmailDebian The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<math><maction xlink... 6.1 Medium -
squirrelmailDebian The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<form action='data... 6.1 Medium -
squirrelmailDebian The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<svg><a xlink:href="... 6.1 Medium -
squirrelmailDebian A directory traversal flaw in SquirrelMail 1.4.22 allows an authenticated attacker to exfiltrate ... 8.8 High -
squirrelmailDebian SquirrelMail 1.4.22 (and other versions before 20170427_0200-SVN) allows post-authentication... 8.8 High -
squirrelmailDebian Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.21 and earlier... 6.8 Medium -
squirrelmailDebian CRLF injection vulnerability in SquirrelMail 1.4.21 and earlier allows remote attackers to modify... 5.8 Medium -
squirrelmailDebian Cross-site scripting (XSS) vulnerability in functions/mime.php in SquirrelMail before 1.4.22... 4.3 Medium -
squirrelmailDebian Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.21 and earlier allow... 4.3 Medium -
squirrelmailDebian functions/page_header.php in SquirrelMail 1.4.21 and earlier does not prevent page rendering... 4.3 Medium -
squirrelmailDebian functions/imap_general.php in SquirrelMail before 1.4.21 does not properly handle 8-bit... 5.0 Medium -
squirrelmailDebian Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.19 and earlier,... 6.8 Medium -
squirrelmailDebian The map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.19-1 on Debian... 6.8 Medium -
squirrelmailDebian functions/mime.php in SquirrelMail before 1.4.18 does not protect the application's content from... 4.3 Medium -
squirrelmailDebian Session fixation vulnerability in SquirrelMail before 1.4.18 allows remote attackers to hijack... 5.8 Medium -
squirrelmailDebian The map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.18 and NaSMail... 6.8 Medium -
squirrelmailDebian Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.4.18 and NaSMail... 4.3 Medium -
squirrelmailDebian Cross-site scripting (XSS) vulnerability in SquirrelMail before 1.4.17 allows remote attackers to... 4.3 Medium -
squirrelmailDebian Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail 1.4.0 through 1.4... 5.0 Medium -
squirrelmailDebian Multiple cross-site scripting (XSS) vulnerabilities in the HTML filter in SquirrelMail 1.4.0... 4.3 Medium -
squirrelmailDebian Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 through 1.4.9 allow... 6.8 Medium -
squirrelmailDebian Dynamic variable evaluation vulnerability in compose.php in SquirrelMail 1.4.0 to 1.4.7 allows... 6.4 Medium -
squirrelmailDebian CRLF injection vulnerability in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject... 5.0 Medium -
squirrelmailDebian Interpretation conflict in the MagicHTML filter in SquirrelMail 1.4.0 to 1.4.5 allows remote... 4.3 Medium -
squirrelmailDebian webmail.php in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary web pages... 4.3 Medium -
squirrelmailDebian options_identities.php in SquirrelMail 1.4.4 and earlier uses the extract function to process the... 4.3 Medium -
squirrelmailDebian Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 through 1.4.4 allow... 4.3 Medium -
squirrelmailDebian PHP remote file inclusion vulnerability in Squirrelmail 1.2.6 allows remote attackers to execute... 7.5 High -
squirrelmailDebian Cross-site scripting (XSS) vulnerability in webmail.php in SquirrelMail before 1.4.4 allows... 4.3 Medium -
squirrelmailDebian Multiple cross-site scripting (XSS) vulnerabilities in Squirrelmail 1.2.10 and earlier allow... 6.8 Medium -
squirrelmailDebian SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute... 10.0 High -
squirrelmailDebian Cross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote... 6.8 Medium -
squirrelmailDebian Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers... 6.8 Medium -
squirrelmailDebian Cross-site scripting (XSS) vulnerability in read_body.php for SquirrelMail 1.2.10, 1.2.9, and... 6.8 Medium -
squirrelmailDebian An incomplete fix for a cross-site scripting (XSS) vulnerability in SquirrelMail 1.2.8 calls the... 4.3 Medium -
squirrelmailDebian SquirrelMail 1.2.7 and earlier allows remote attackers to determine the absolute pathname of the... 5.0 Medium -
squirrelmailDebian Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to... 7.5 High