Total vulnerabilities in the database
Multiple cross-site scripting (XSS) vulnerabilities in the HTML filter in SquirrelMail 1.4.0 through 1.4.9a allow remote attackers to inject arbitrary web script or HTML via the (1) data: URI in an HTML e-mail attachment or (2) various non-ASCII character sets that are not properly filtered when viewed with Microsoft Internet Explorer.
| Software | From | Fixed in |
|---|---|---|
| squirrelmail / squirrelmail | 1.4.2 | 1.4.2.x |
| squirrelmail / squirrelmail | 1.4.6_rc1 | 1.4.6_rc1.x |
| squirrelmail / squirrelmail | 1.4.3_r3 | 1.4.3_r3.x |
| squirrelmail / squirrelmail | 1.4.9a | 1.4.9a.x |
| squirrelmail / squirrelmail | 1.4.6 | 1.4.6.x |
| squirrelmail / squirrelmail | 1.4.7 | 1.4.7.x |
| squirrelmail / squirrelmail | 1.4.3_rc1 | 1.4.3_rc1.x |
| squirrelmail / squirrelmail | 1.4.4_rc1 | 1.4.4_rc1.x |
| squirrelmail / squirrelmail | 1.4.3 | 1.4.3.x |
| squirrelmail / squirrelmail | 1.4.1 | 1.4.1.x |
| squirrelmail / squirrelmail | 1.4.9 | 1.4.9.x |
| squirrelmail / squirrelmail | 1.4.8 | 1.4.8.x |
| squirrelmail / squirrelmail | 1.4.6_cvs | 1.4.6_cvs.x |
| squirrelmail / squirrelmail | 1.4.0 | 1.4.0.x |
| squirrelmail / squirrelmail | 1.4.3a | 1.4.3a.x |
| squirrelmail / squirrelmail | 1.4.4 | 1.4.4.x |
| squirrelmail / squirrelmail | 1.4.3aa | 1.4.3aa.x |
| squirrelmail / squirrelmail | 1.4.5 | 1.4.5.x |