CVE-2004-0520
Fixed in a distro release EPSS 7%
Cross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote attackers to insert arbitrary HTML and script via the content-type mail header, as demonstrated using read_body.php.
Products: open_webmail, sgi propack, squirrelmail
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.0 | squirrelmail | 1:1.2.6-1.4 |
| Red Hat Enterprise Linux 3 | squirrelmail | 0:1.4.3-0.e3.1 |