Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

squirrelmail squirrelmail 1.4.3a vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2005-1769
Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 up to and including 1.4.4 allow remote malicious users to inject arbitrary web script or HTML via unknown attack vectors in (1) the URL or (2) an e-mail message.
Squirrelmail Squirrelmail 1.4.3 Rc1Squirrelmail Squirrelmail 1.4.3aSquirrelmail Squirrelmail 1.44Squirrelmail Squirrelmail 1.4.1Squirrelmail Squirrelmail 1.4.2Squirrelmail Squirrelmail 1.4.3
NA
CVE-2006-0195
Interpretation conflict in the MagicHTML filter in SquirrelMail 1.4.0 to 1.4.5 allows remote malicious users to conduct cross-site scripting (XSS) attacks via style sheet specifiers with invalid (1) "/*" and "*/" comments, or (2) a newline in a "url"...
Squirrelmail Squirrelmail 1.4.3aSquirrelmail Squirrelmail 1.4.4Squirrelmail Squirrelmail 1.4.3 R3Squirrelmail Squirrelmail 1.4.3 Rc1Squirrelmail Squirrelmail 1.4Squirrelmail Squirrelmail 1.4.1Squirrelmail Squirrelmail 1.4.4 Rc1Squirrelmail Squirrelmail 1.4.5Squirrelmail Squirrelmail 1.4.2Squirrelmail Squirrelmail 1.4.3Squirrelmail Squirrelmail 1.4.6 Rc1Squirrelmail Squirrelmail 1.4 Rc1
NA
CVE-2006-0188
webmail.php in SquirrelMail 1.4.0 to 1.4.5 allows remote malicious users to inject arbitrary web pages into the right frame via a URL in the right_frame parameter. NOTE: this has been called a cross-site scripting (XSS) issue, but it is different than what is normally identified ...
Squirrelmail Squirrelmail 1.4.3aSquirrelmail Squirrelmail 1.4.4Squirrelmail Squirrelmail 1.4.3 R3Squirrelmail Squirrelmail 1.4.3 Rc1Squirrelmail Squirrelmail 1.4.2Squirrelmail Squirrelmail 1.4.3Squirrelmail Squirrelmail 1.4.6 Rc1Squirrelmail Squirrelmail 1.4 Rc1Squirrelmail Squirrelmail 1.4Squirrelmail Squirrelmail 1.4.1Squirrelmail Squirrelmail 1.4.4 Rc1Squirrelmail Squirrelmail 1.4.5
NA
CVE-2006-0377
CRLF injection vulnerability in SquirrelMail 1.4.0 to 1.4.5 allows remote malicious users to inject arbitrary IMAP commands via newline characters in the mailbox parameter of the sqimap_mailbox_select command, aka "IMAP injection."
Squirrelmail Squirrelmail 1.4.3Squirrelmail Squirrelmail 1.4.3 R3Squirrelmail Squirrelmail 1.4 Rc1Squirrelmail Squirrelmail 1.4.1Squirrelmail Squirrelmail 1.4.2Squirrelmail Squirrelmail 1.4.5Squirrelmail Squirrelmail 1.4.6 Rc1Squirrelmail Squirrelmail 1.4.3 Rc1Squirrelmail Squirrelmail 1.4.3aSquirrelmail Squirrelmail 1.4Squirrelmail Squirrelmail 1.4.4Squirrelmail Squirrelmail 1.4.4 Rc1
NA
CVE-2006-4019
Dynamic variable evaluation vulnerability in compose.php in SquirrelMail 1.4.0 to 1.4.7 allows remote malicious users to overwrite arbitrary program variables and read or write the attachments and preferences of other users.
Squirrelmail Squirrelmail 1.4.3Squirrelmail Squirrelmail 1.4.3 R3Squirrelmail Squirrelmail 1.4.7Squirrelmail Squirrelmail 1.4 Rc1Squirrelmail Squirrelmail 1.4.0Squirrelmail Squirrelmail 1.4.4 Rc1Squirrelmail Squirrelmail 1.4.5Squirrelmail Squirrelmail 1.4.1Squirrelmail Squirrelmail 1.4.2Squirrelmail Squirrelmail 1.4.6Squirrelmail Squirrelmail 1.4.6 Rc1Squirrelmail Squirrelmail 1.4.3 Rc1Squirrelmail Squirrelmail 1.4.3aSquirrelmail Squirrelmail 1.4.4Squirrelmail Squirrelmail 1.44
NA
CVE-2007-2589
Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail 1.4.0 up to and including 1.4.9a allows remote malicious users to send e-mails from arbitrary users via certain data in the SRC attribute of an IMG element.
Squirrelmail Squirrelmail 1.4.2Squirrelmail Squirrelmail 1.4.3Squirrelmail Squirrelmail 1.4.5Squirrelmail Squirrelmail 1.4.6Squirrelmail Squirrelmail 1.4.3 R3Squirrelmail Squirrelmail 1.4.3 Rc1Squirrelmail Squirrelmail 1.4.6 CvsSquirrelmail Squirrelmail 1.4.6 Rc1Squirrelmail Squirrelmail 1.4.3aSquirrelmail Squirrelmail 1.4.3aaSquirrelmail Squirrelmail 1.4.7Squirrelmail Squirrelmail 1.4.8Squirrelmail Squirrelmail 1.4.0Squirrelmail Squirrelmail 1.4.1Squirrelmail Squirrelmail 1.4.4Squirrelmail Squirrelmail 1.4.4 Rc1Squirrelmail Squirrelmail 1.4.9Squirrelmail Squirrelmail 1.4.9a
NA
CVE-2007-1262
Multiple cross-site scripting (XSS) vulnerabilities in the HTML filter in SquirrelMail 1.4.0 up to and including 1.4.9a allow remote malicious users to inject arbitrary web script or HTML via the (1) data: URI in an HTML e-mail attachment or (2) various non-ASCII character sets t...
Squirrelmail Squirrelmail 1.4.3 R3Squirrelmail Squirrelmail 1.4.3 Rc1Squirrelmail Squirrelmail 1.4.6 CvsSquirrelmail Squirrelmail 1.4.6 Rc1Squirrelmail Squirrelmail 1.4.2Squirrelmail Squirrelmail 1.4.3Squirrelmail Squirrelmail 1.4.5Squirrelmail Squirrelmail 1.4.6Squirrelmail Squirrelmail 1.4.3aSquirrelmail Squirrelmail 1.4.3aaSquirrelmail Squirrelmail 1.4.7Squirrelmail Squirrelmail 1.4.8Squirrelmail Squirrelmail 1.4.0Squirrelmail Squirrelmail 1.4.1Squirrelmail Squirrelmail 1.4.4Squirrelmail Squirrelmail 1.4.4 Rc1Squirrelmail Squirrelmail 1.4.9Squirrelmail Squirrelmail 1.4.9a
NA
CVE-2005-0103
PHP remote file inclusion vulnerability in webmail.php in SquirrelMail prior to 1.4.4 allows remote malicious users to execute arbitrary PHP code by modifying a URL parameter to reference a URL on a remote web server that contains the code.
Squirrelmail Squirrelmail 1.2.10Squirrelmail Squirrelmail 1.2.11Squirrelmail Squirrelmail 1.2.9Squirrelmail Squirrelmail 1.4Squirrelmail Squirrelmail 1.2.2Squirrelmail Squirrelmail 1.2.3Squirrelmail Squirrelmail 1.0.4Squirrelmail Squirrelmail 1.0.5Squirrelmail Squirrelmail 1.2.4Squirrelmail Squirrelmail 1.2.5Squirrelmail Squirrelmail 1.4.2Squirrelmail Squirrelmail 1.4.3Squirrelmail Squirrelmail 1.4.0Squirrelmail Squirrelmail 1.4.1Squirrelmail Squirrelmail 1.2.0Squirrelmail Squirrelmail 1.2.1Squirrelmail Squirrelmail 1.2.6Squirrelmail Squirrelmail 1.2.7Squirrelmail Squirrelmail 1.2.8Squirrelmail Squirrelmail 1.4.3 Rc1Squirrelmail Squirrelmail 1.4.3a
NA
CVE-2005-0075
prefs.php in SquirrelMail prior to 1.4.4, with register_globals enabled, allows remote malicious users to inject local code into the SquirrelMail code via custom preference handlers.
Squirrelmail Squirrelmail 1.2.2Squirrelmail Squirrelmail 1.2.3Squirrelmail Squirrelmail 1.4.0Squirrelmail Squirrelmail 1.4.1Squirrelmail Squirrelmail 1.0.4Squirrelmail Squirrelmail 1.0.5Squirrelmail Squirrelmail 1.2.4Squirrelmail Squirrelmail 1.2.5Squirrelmail Squirrelmail 1.4.2Squirrelmail Squirrelmail 1.4.3Squirrelmail Squirrelmail 1.2.0Squirrelmail Squirrelmail 1.2.1Squirrelmail Squirrelmail 1.2.6Squirrelmail Squirrelmail 1.2.7Squirrelmail Squirrelmail 1.2.8Squirrelmail Squirrelmail 1.4.3aSquirrelmail Squirrelmail 1.2.10Squirrelmail Squirrelmail 1.2.11Squirrelmail Squirrelmail 1.2.9Squirrelmail Squirrelmail 1.4
NA
CVE-2005-0104
Cross-site scripting (XSS) vulnerability in webmail.php in SquirrelMail prior to 1.4.4 allows remote malicious users to inject arbitrary web script or HTML via certain integer variables.
Squirrelmail Squirrelmail 1.0.4Squirrelmail Squirrelmail 1.2.3Squirrelmail Squirrelmail 1.2.1Squirrelmail Squirrelmail 1.2.10Squirrelmail Squirrelmail 1.2.7Squirrelmail Squirrelmail 1.2.8Squirrelmail Squirrelmail 1.2.9Squirrelmail Squirrelmail 1.4.3aSquirrelmail Squirrelmail 1.44Squirrelmail Squirrelmail 1.0.5Squirrelmail Squirrelmail 1.2.0Squirrelmail Squirrelmail 1.2.5Squirrelmail Squirrelmail 1.2.6Squirrelmail Squirrelmail 1.4.3Squirrelmail Squirrelmail 1.4.3 Rc1Squirrelmail Squirrelmail 1.2.4Squirrelmail Squirrelmail 1.4.1Squirrelmail Squirrelmail 1.4.2Squirrelmail Squirrelmail 1.2.11Squirrelmail Squirrelmail 1.2.2Squirrelmail Squirrelmail 1.4Squirrelmail Squirrelmail 1.4.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-26978CVE-2024-26982wirelessCVE-2023-6949CVE-2024-26980CVE-2024-32766CVE-2024-26939cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook