CVE-2007-2589

概要

参考情報

• docs.info.apple.com/article.html
• lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
• osvdb.org/35889
• secunia.com/advisories/25200 · Patch
• secunia.com/advisories/25320
• secunia.com/advisories/25787
• secunia.com/advisories/26235
• mandriva.com/security/advisories
• novell.com/linux/security/advisories/2007_13_sr.html
• securityfocus.com/bid/25159
• squirrelmail.org/security/issue/2007-05-09
• vupen.com/english/advisories/2007/1748
• vupen.com/english/advisories/2007/2732
• exchange.xforce.ibmcloud.com/vulnerabilities/34219
• oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11448
• rhn.redhat.com/errata/RHSA-2007-0358.html

squirrelmail のその他の脆弱性

• CVE-2020-14933高 8.8compose.php in SquirrelMail 1.4.22 calls unserialize for the $attachments value, which originates from an HTTP POST request. NOTE: the vendo…
• CVE-2020-14932緊急 9.8compose.php in SquirrelMail 1.4.22 calls unserialize for the $mailtodata value, which originates from an HTTP GET request. This is related t…
• CVE-2019-12970中 6.1XSS was discovered in SquirrelMail through 1.4.22 and 1.5.x through 1.5.2. Due to improper handling of RCDATA and RAWTEXT type elements, the…
• CVE-2018-14955中 6.1The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations (animate to attribute).
• CVE-2018-14954中 6.1The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute.