>> SquirrelMail Multiple Cross Site Scripting and Cross Site Request Forgery Vulnerabilities
Title : SquirrelMail Multiple Cross Site Scripting and Cross Site Request Forgery Vulnerabilities VUPEN ID : VUPEN/ADV-2007-1748 CVE ID : CVE-2007-1262 - CVE-2007-2589
Rated as : Moderate Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2007-05-09
Technical Description
Multiple vulnerabilities have been identified in SquirrelMail, which could be exploited by attackers to execute arbitrary scripting code or bypass security checks. These issues are caused by input validation errors in the "functions/mime.php", "src/compose.php" and "src/view_text.php" scripts when handling attachments containing "data:" URLs or when processing certain charsets and images within messages, which could be exploited to conduct cross site scripting and request forgery attacks.
