| Package | Affected versions | Patched versions |
|---|---|---|
| squirrelmail | = 1.4.0= 1.4.1= 1.4.2= 1.4.3= 1.4.3_r3= 1.4.3_rc1= 1.4.3a= 1.4.3aa= 1.4.4= 1.4.4_rc1= 1.4.5= 1.4.6= 1.4.6_cvs= 1.4.6_rc1= 1.4.7= 1.4.8= 1.4.9= 1.4.9a |
Multiple cross-site scripting (XSS) vulnerabilities in the HTML filter in SquirrelMail 1.4.0 through 1.4.9a allow remote attackers to inject arbitrary web script or HTML via the (1) data: URI in an HTML e-mail attachment or (2) various non-ASCII character sets that are not properly filtered when viewed with Microsoft Internet Explorer.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free