← Database

CVE-2002-1131

HIGH CVSS: 7.5 Published: 2002-10-04 Modified: 2026-06-16

Description

Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via (1) addressbook.php, (2) options.php, (3) search.php, or (4) help.php.

Affected Platforms

Squirrelmail Squirrelmail

Weakness Type

NVD-CWE-Other

References