Back
CVE-2002-1341
Cross-site scripting (XSS) vulnerability in read_body.php for SquirrelMail 1.2.10, 1.2.9, and earlier allows remote attackers to insert script and HTML via the (1) mailbox and (2) passed_id parameters.
Published: Dec 18, 2002
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (5)
| Vendor | Product | Version |
|---|---|---|
| squirrelmail | squirrelmail | 1.2.6 |
| squirrelmail | squirrelmail | 1.2.7 |
| squirrelmail | squirrelmail | 1.2.8 |
| squirrelmail | squirrelmail | 1.2.9 |
| squirrelmail | squirrelmail | 1.2.10 |
GitHub Security Advisory GHSA-m4rj-cp46-j9cp
Cross-site scripting (XSS) vulnerability in read_body.php for SquirrelMail 1.2.10, 1.2.9, and...
References (18)
- http://f0kp.iplus.ru/bz/008.txt
- http://marc.info/?l=bugtraq&m=103893844126484&w=2
- http://marc.info/?l=bugtraq&m=103911130503272&w=2
- http://marc.info/?l=bugtraq&m=104004924002662&w=2
- http://secunia.com/advisories/8220
- http://www.debian.org/security/2002/dsa-220
- http://www.redhat.com/support/errata/RHSA-2003-042.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/6302 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10754
- http://f0kp.iplus.ru/bz/008.txt
- http://marc.info/?l=bugtraq&m=103893844126484&w=2
- http://marc.info/?l=bugtraq&m=103911130503272&w=2
- http://marc.info/?l=bugtraq&m=104004924002662&w=2
- http://secunia.com/advisories/8220
- http://www.debian.org/security/2002/dsa-220
Risk Scores
CVSS Score
6.8 / 10
EPSS Score
1.97%
Top 22% most likely to be exploited
Threat Score
27.8 / 100
Data Sources
NVD
EPSS
GitHub