CVE-2006-0195

概要

参考情報

• patches.sgi.com/support/free/security/advisories/20060501-01-U.asc
• secunia.com/advisories/18985 · Vendor Advisory
• secunia.com/advisories/19130
• secunia.com/advisories/19131
• secunia.com/advisories/19176
• secunia.com/advisories/19205
• secunia.com/advisories/19960
• secunia.com/advisories/20210
• securitytracker.com/id
• debian.org/security/2006/dsa-988
• gentoo.org/security/en/glsa/glsa-200603-09.xml
• mandriva.com/security/advisories
• novell.com/linux/security/advisories/2006_05_sr.html
• redhat.com/archives/fedora-announce-list/2006-March/msg00004.html
• redhat.com/support/errata/RHSA-2006-0283.html

squirrelmail のその他の脆弱性

• CVE-2020-14933高 8.8compose.php in SquirrelMail 1.4.22 calls unserialize for the $attachments value, which originates from an HTTP POST request. NOTE: the vendo…
• CVE-2020-14932緊急 9.8compose.php in SquirrelMail 1.4.22 calls unserialize for the $mailtodata value, which originates from an HTTP GET request. This is related t…
• CVE-2019-12970中 6.1XSS was discovered in SquirrelMail through 1.4.22 and 1.5.x through 1.5.2. Due to improper handling of RCDATA and RAWTEXT type elements, the…
• CVE-2018-14955中 6.1The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations (animate to attribute).
• CVE-2018-14954中 6.1The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute.