| Max CVSS | 6.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2018-8741 | 6.5 |
A directory traversal flaw in SquirrelMail 1.4.22 allows an authenticated attacker to exfiltrate (or potentially delete) files from the hosting server, related to ../ in the att_local_name field in Deliver.class.php.
|
15-08-2019 - 20:15 | 17-03-2018 - 14:29 | |
| CVE-2018-14950 | 4.3 |
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<svg><a xlink:href=" attack.
|
15-08-2019 - 20:15 | 05-08-2018 - 18:29 | |
| CVE-2018-14954 | 4.3 |
The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute.
|
15-08-2019 - 20:15 | 05-08-2018 - 18:29 | |
| CVE-2018-14952 | 4.3 |
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<math><maction xlink:href=" attack.
|
15-08-2019 - 20:15 | 05-08-2018 - 18:29 | |
| CVE-2018-14955 | 4.3 |
The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations (animate to attribute).
|
15-08-2019 - 20:15 | 05-08-2018 - 18:29 | |
| CVE-2018-14951 | 4.3 |
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<form action='data:text" attack.
|
15-08-2019 - 20:15 | 05-08-2018 - 18:29 | |
| CVE-2018-14953 | 4.3 |
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<math xlink:href=" attack.
|
15-08-2019 - 20:15 | 05-08-2018 - 18:29 |