CVE-2002-1341

Fixed in a distro release EPSS 2%

Cross-site scripting (XSS) vulnerability in read_body.php for SquirrelMail 1.2.10, 1.2.9, and earlier allows remote attackers to insert script and HTML via the (1) mailbox and (2) passed_id parameters.

Published 2002-12-11 · CVE record · OSV

Products: squirrelmail

Distro releases