CVE-2002-1131

no score yetEPSS 26%

squirrelmail squirrelmail: no CVSS score yet. EPSS 26% chance of exploitation in the next 30 days.

Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via (1) addressbook.php, (2) options.php, (3) search.php, or (4) help.php.

EPSS: 26% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
Published: 2002-10-04
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

squirrelmail:squirrelmail

References

http://archives.neohapsis.com/archives/bugtraq/2002-09/0246.html
http://sourceforge.net/project/shownotes.php?group_id=311&release_id=110774
http://www.debian.org/security/2002/dsa-191
http://www.iss.net/security_center/static/10145.php
http://www.redhat.com/support/errata/RHSA-2002-204.html

Check your stack JSON