CVE-2007-1262: XSS
Multiple cross-site scripting (XSS) vulnerabilities in the HTML filter in SquirrelMail 1.4.0 through 1.4.9a allow remote attackers to inject arbitrary web script or HTML via the (1) data: URI in an HTML e-mail attachment or (2) various non-ASCII character sets that are not properly filtered when viewed with Microsoft Internet Explorer.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1262?
CVE-2007-1262 is classified as a medium severity vulnerability due to its potential for XSS attacks.
How do I fix CVE-2007-1262?
To fix CVE-2007-1262, upgrade SquirrelMail to version 1.4.9b or later, which contains patches for these vulnerabilities.
What types of attacks are possible with CVE-2007-1262?
CVE-2007-1262 allows attackers to perform cross-site scripting (XSS) attacks, leading to unauthorized script execution in the user's browser.
What versions of SquirrelMail are affected by CVE-2007-1262?
CVE-2007-1262 affects SquirrelMail versions 1.4.0 through 1.4.9a.
Is it safe to continue using the affected versions of SquirrelMail with CVE-2007-1262?
It is not safe to use affected versions of SquirrelMail, as CVE-2007-1262 poses a risk of XSS exploitation.