CVE-2002-1131

None

CVSS

—

EPSS

25.8%

Published

Oct 4, 2002

CISA due date

—

The record

Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via (1) addressbook.php, (2) options.php, (3) search.php, or (4) help.php.

Affected packages

Ecosystem	Package	Introduced	Fixed
Debian:3.0	squirrelmail	0	1.2.6-1.1

Related vulnerabilities

CVE-2004-0519 Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote… Also affects squirrelmail