The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
webmail.php in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary web pages into the right frame via a URL in the right_frame parameter. NOTE: this has been called a cross-site scripting (XSS) issue, but it is different than what is normally identified as XSS.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade squirrelmail | Dec 10, 2025 | Feb 24, 2006 |
| Gentoo Linux | — | Upgrade mail-client/squirrelmail. | Oct 30, 2017 | Feb 23, 2006 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub