CVE-2006-6142

no score yetEPSS 2.4%

squirrelmail squirrelmail: no CVSS score yet. EPSS 2.4% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 through 1.4.9 allow remote attackers to inject arbitrary web script or HTML via the (1) mailto parameter in (a) webmail.php, the (2) session and (3) delete_draft parameters in (b) compose.php, and (4) unspecified vectors involving "a shortcoming in the magicHTML filter."

EPSS: 2.4% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
Published: 2006-12-05
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

squirrelmail:squirrelmail

References

ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc
http://docs.info.apple.com/article.html?artnum=306172
http://fedoranews.org/cms/node/2438
http://fedoranews.org/cms/node/2439
http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html

Check your stack JSON