SquirrelMail Message Header Field Script Injection Vulnerability
BID:4667
Info
SquirrelMail Message Header Field Script Injection Vulnerability
| Bugtraq ID: | 4667 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 03 2002 12:00AM |
| Updated: | May 03 2002 12:00AM |
| Credit: | Credited to Nick Cleaton. |
| Vulnerable: |
SquirrelMail SquirrelMail 1.2.5 SquirrelMail SquirrelMail 1.2.4 SquirrelMail SquirrelMail 1.2.3 SquirrelMail SquirrelMail 1.2.2 SquirrelMail SquirrelMail 1.2.1 SquirrelMail SquirrelMail 1.2 .0 |
| Not Vulnerable: |
SquirrelMail SquirrelMail 1.2.6 |
Exploit / POC
SquirrelMail Message Header Field Script Injection Vulnerability
There is no exploit code required.
There is no exploit code required.
Solution / Fix
SquirrelMail Message Header Field Script Injection Vulnerability
Solution:
This issue has been addressed in version 1.2.6 of SquirrelMail. Users are advised to upgrade.
SquirrelMail SquirrelMail 1.2 .0
SquirrelMail SquirrelMail 1.2.1
SquirrelMail SquirrelMail 1.2.2
SquirrelMail SquirrelMail 1.2.3
SquirrelMail SquirrelMail 1.2.4
SquirrelMail SquirrelMail 1.2.5
Solution:
This issue has been addressed in version 1.2.6 of SquirrelMail. Users are advised to upgrade.
SquirrelMail SquirrelMail 1.2 .0
-
SquirrelMail squirrelmail-1.2.6
http://www.squirrelmail.org/download.php
SquirrelMail SquirrelMail 1.2.1
-
SquirrelMail squirrelmail-1.2.6
http://www.squirrelmail.org/download.php
SquirrelMail SquirrelMail 1.2.2
-
SquirrelMail squirrelmail-1.2.6
http://www.squirrelmail.org/download.php
SquirrelMail SquirrelMail 1.2.3
-
SquirrelMail squirrelmail-1.2.6
http://www.squirrelmail.org/download.php
SquirrelMail SquirrelMail 1.2.4
-
SquirrelMail squirrelmail-1.2.6
http://www.squirrelmail.org/download.php
SquirrelMail SquirrelMail 1.2.5
-
SquirrelMail squirrelmail-1.2.6
http://www.squirrelmail.org/download.php