CVE-2005-0152

Description

References

• ftp.debian.org/debian/dists/stable-proposed-updates/squirrelmail_1.2.6-2_i386.changes
• secunia.com/advisories/14096 · Patch
• debian.org/security/2005/dsa-662 · Patch
• kb.cert.org/vuls/id/203214 · Patch

squirrelmail의 다른 취약점

• CVE-2020-14933높음 8.8compose.php in SquirrelMail 1.4.22 calls unserialize for the $attachments value, which originates from an HTTP POST request. NOTE: the vendo…
• CVE-2020-14932심각 9.8compose.php in SquirrelMail 1.4.22 calls unserialize for the $mailtodata value, which originates from an HTTP GET request. This is related t…
• CVE-2019-12970보통 6.1XSS was discovered in SquirrelMail through 1.4.22 and 1.5.x through 1.5.2. Due to improper handling of RCDATA and RAWTEXT type elements, the…
• CVE-2018-14955보통 6.1The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations (animate to attribute).
• CVE-2018-14954보통 6.1The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute.