Red Hat Security AdvisoryRHSA-2007:0022
squirrelmail security update
Released 2007-01-31 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 squirrelmail-1.4.8-4.el3
- Red Hat Enterprise Linux AS version 3 squirrelmail-1.4.8-4.el3
- Red Hat Enterprise Linux AS version 4 squirrelmail-1.4.8-4.el4
- Red Hat Enterprise Linux Desktop version 4 squirrelmail-1.4.8-4.el4
- Red Hat Enterprise Linux ES version 3 squirrelmail-1.4.8-4.el3
- Red Hat Enterprise Linux ES version 4 squirrelmail-1.4.8-4.el4
- Red Hat Enterprise Linux WS version 3 squirrelmail-1.4.8-4.el3
- Red Hat Enterprise Linux WS version 4 squirrelmail-1.4.8-4.el4
Fixes 1 record
Priority LOW 35
Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 through 1.4.9 allow remote attackers to inject arbitrary web script or HTML via the (1) mailto parameter in (a) webmail.php, the (2) session and (…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02512 · Published 2006-12-05 · Fixed
