Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:46:55 +0000 certa-2009-avi-188 — Plusieurs vulnérabilités présentes dans SquirrelMail permettent à un utilisateur distant de contourner la politique de… https://cve.radiocsirt.org/vuln/certa-2009-avi-188 certa-2009-avi-188 https://cve.radiocsirt.org/vuln/certa-2009-avi-188 EUVD-2026-122625 https://cve.radiocsirt.org/vuln/euvd-2026-122625 EUVD-2026-122625 https://cve.radiocsirt.org/vuln/euvd-2026-122625 fkie_cve-2009-1578 https://cve.radiocsirt.org/vuln/fkie_cve-2009-1578 <p>Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.4.18 and NaSMail before 1.7 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) certain encrypted strings in e-mail headers, related to contrib/decrypt_headers.php; (2) PHP_SELF; and (3) the query string (aka QUERY_STRING).</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.4.18 and NaSMail before 1.7 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) certain encrypted strings in e-mail headers, related to contrib/decrypt_headers.php; (2) PHP_SELF; and (3) the query string (aka QUERY_STRING).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2009-1578 GHSA-2ffv-f223-6p7w https://cve.radiocsirt.org/vuln/ghsa-2ffv-f223-6p7w <p>Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.4.18 and NaSMail before 1.7 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) certain encrypted strings in e-mail headers, related to contrib/decrypt_headers.php; (2) PHP_SELF; and (3) the query string (aka QUERY_STRING).</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.4.18 and NaSMail before 1.7 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) certain encrypted strings in e-mail headers, related to contrib/decrypt_headers.php; (2) PHP_SELF; and (3) the query string (aka QUERY_STRING).</p> https://cve.radiocsirt.org/vuln/ghsa-2ffv-f223-6p7w gsd-2009-1578 https://cve.radiocsirt.org/vuln/gsd-2009-1578 gsd-2009-1578 https://cve.radiocsirt.org/vuln/gsd-2009-1578 RHSA-2009:1066 — Red Hat Security Advisory: squirrelmail security update https://cve.radiocsirt.org/vuln/rhsa-2009:1066 <p>SquirrelMail: Multiple cross site scripting issues SquirrelMail: Server-side code injection in map_yp_alias username map SquirrelMail: CSS positioning vulnerability</p> <p>SquirrelMail: Multiple cross site scripting issues SquirrelMail: Server-side code injection in map_yp_alias username map SquirrelMail: CSS positioning vulnerability</p> https://cve.radiocsirt.org/vuln/rhsa-2009:1066