Oval Definition:	oval:org.mitre.oval:tst:32449
Comment: squirrelmail is earlier than 0:1.4.8-4.el3 Type: rpminfo_test Namespace: linux Check_Existence: at_least_one_exists Check: at least one State Operator: AND References Object: oval:org.mitre.oval:obj:14331 State: oval:org.mitre.oval:ste:9497 Referencing Definitions Definition ID Class Title Last Modified oval:org.mitre.oval:def:9988 V Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 through 1.4.9 allow remote attackers to inject arbitrary web script or HTML via the (1) mailto parameter in (a) webmail.php, the (2) session and (3) delete_draft parameters in (b) compose.php, and (4) unspecified vectors involving "a shortcoming in the magicHTML filter." 2013-04-29
BACK