CVE-2002-1276: XSS
An incomplete fix for a cross-site scripting (XSS) vulnerability in SquirrelMail 1.2.8 calls the striptags function on the PHPSELF value but does not save the result back to that variable, leaving it open to cross-site scripting attacks.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1276?
CVE-2002-1276 is classified as a moderate severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2002-1276?
To fix CVE-2002-1276, upgrade SquirrelMail to a version after 1.2.8 that includes the complete fix for the XSS vulnerability.
What software is affected by CVE-2002-1276?
CVE-2002-1276 specifically affects SquirrelMail version 1.2.8.
What are the implications of CVE-2002-1276?
The implications of CVE-2002-1276 include the potential for attackers to execute harmful scripts in the context of a user's session.
What is the nature of the vulnerability in CVE-2002-1276?
The nature of the vulnerability in CVE-2002-1276 is an incomplete fix for a cross-site scripting issue that allows PHP_SELF to remain vulnerable.