Oval Definition:	oval:org.mitre.oval:tst:33384
Comment: squirrelmail is earlier than 0:1.4.8-4.el4 Type: rpminfo_test Namespace: linux Check_Existence: at_least_one_exists Check: at least one State Operator: AND References Object: oval:org.mitre.oval:obj:14331 State: oval:org.mitre.oval:ste:10379 Referencing Definitions Definition ID Class Title Last Modified oval:org.mitre.oval:def:9988 V Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 through 1.4.9 allow remote attackers to inject arbitrary web script or HTML via the (1) mailto parameter in (a) webmail.php, the (2) session and (3) delete_draft parameters in (b) compose.php, and (4) unspecified vectors involving "a shortcoming in the magicHTML filter." 2013-04-29
BACK