CVE-2010-1637

Mô tả

Tham khảo

• conference.hitb.org/hitbsecconf2010dxb/materials/D1%20-%20Laurent%20Oudot%20-%20Improving%20the%20Stealthiness%20of%20Web%20Hacking.pdf · Broken Link
• lists.apple.com/archives/security-announce/2012/Feb/msg00000.html · Mailing List
• lists.fedoraproject.org/pipermail/package-announce/2010-June/043239.html · Mailing List
• lists.fedoraproject.org/pipermail/package-announce/2010-June/043258.html · Mailing List
• lists.fedoraproject.org/pipermail/package-announce/2010-June/043261.html · Mailing List
• rhn.redhat.com/errata/RHSA-2012-0103.html · Third Party Advisory
• secunia.com/advisories/40307 · Broken Link
• squirrelmail.org/security/issue/2010-06-21 · Patch
• squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/plugins/mail_fetch/functions.php

Lỗ hổng khác của squirrelmail

• CVE-2020-14933CAO 8.8compose.php in SquirrelMail 1.4.22 calls unserialize for the $attachments value, which originates from an HTTP POST request. NOTE: the vendo…
• CVE-2020-14932NGHIÊM TRỌNG 9.8compose.php in SquirrelMail 1.4.22 calls unserialize for the $mailtodata value, which originates from an HTTP GET request. This is related t…
• CVE-2019-12970TRUNG BÌNH 6.1XSS was discovered in SquirrelMail through 1.4.22 and 1.5.x through 1.5.2. Due to improper handling of RCDATA and RAWTEXT type elements, the…
• CVE-2018-14955TRUNG BÌNH 6.1The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations (animate to attribute).
• CVE-2018-14954TRUNG BÌNH 6.1The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute.