squirellmail php bugs updated since 25.01.2002
Published:		04.12.2002
Source:		BUGTRAQ
SecurityVulns ID:		1715
Type:		remote
Level:		5/10
Description:		Uninitialized PHP valirables, crossite scripting.

Affected:

SQUIRRELMAIL : squirrelmail 1.2

Original document		euronymous, SquirrelMail v1.2.9 XSS bugs (04.12.2002)
		DarC KonQuesT, Squirrel Mail 1.2.7 XSS Exploit (20.09.2002)
		pokleyzz sakamaniaka, squirrelmail 1.2.5 email user can execute command (29.03.2002)
		skylined_(at)_edup.tudelft.nl, squirrelmail: squirrelspell plugin check_me.mod.php bug (05.02.2002)
		Karol Wiêsek, squirrelmail bug (25.01.2002)
		Tom McAdam, Vulnerabilities in squirrelmail (25.01.2002)

Discuss:

Read or add your comments to this news (0 comments)

Internet Explorer modal dialog style crossite scripting
Published:		04.12.2002
Source:		BUGTRAQ
SecurityVulns ID:		2457
Type:		client
Level:		5/10
Description:		By using <IMG width="0" height="0" style="width: expression(alert());"> script may be executed in local zone.

Affected:		MICROSOFT : Internet Explorer 5.5
		MICROSOFT : Internet Explorer 6.0

Original document

Liu Die Yu, Poisonous Style for Dialog window turns the zone off. (04.12.2002)

Discuss:

Read or add your comments to this news (0 comments)