CVE-2006-0188: XSS
webmail.php in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary web pages into the right frame via a URL in the rightframe parameter. NOTE: this has been called a cross-site scripting (XSS) issue, but it is different than what is normally identified as XSS.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-0188?
CVE-2006-0188 has been classified as a moderate severity vulnerability due to its potential for exploitation via cross-site scripting.
How do I fix CVE-2006-0188?
To fix CVE-2006-0188, upgrade SquirrelMail to version 1.4.6 or later, as this addresses the vulnerability.
Which versions of SquirrelMail are affected by CVE-2006-0188?
SquirrelMail versions 1.4.0 to 1.4.5 are affected by CVE-2006-0188.
Can CVE-2006-0188 be exploited remotely?
Yes, CVE-2006-0188 can be exploited remotely by injecting arbitrary web pages into the right frame.
Is CVE-2006-0188 a typical cross-site scripting vulnerability?
CVE-2006-0188 is related to cross-site scripting but is different from typical XSS vulnerabilities due to the way it interacts with web frames.