Security

CSS positioning vulnerability

Date:

2009-05-12

Description:

An issue was fixed that allowed phishing and cross-site scripting (XSS) attacks to be run by surreptitious placement of content in specially-crafted emails sent to SquirrelMail users.

Affected Versions:

<= 1.4.17

Register Globals:

Register_globals does not have to be on for this issue.

CVE ID(s):

CVE-2009-1581

Patch:

view patch

Credits:

Luc Beurton

This page last updated:

2009-05-12 00:00:00