PublicDate: 2006-06-23 00:02:00 UTC
Candidate: CVE-2006-3174
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3174
Description:
 Cross-site scripting (XSS) vulnerability in search.php in SquirrelMail
 1.5.1 and earlier, when register_globals is enabled, allows remote
 attackers to inject arbitrary HTML via the mailbox parameter.
Ubuntu-Description:
Notes:
Priority: untriaged
Discovered-by:
Assigned-to:
CVSS:

Bugs:
dapper_squirrelmail: ignored (reached end-of-life)
edgy_squirrelmail: released (1.4.8-1ubuntu0.1)
feisty_squirrelmail: released (1.4.9a-1ubuntu0.1)
gutsy_squirrelmail: released (1.4.10a-2)
hardy_squirrelmail: released (1.4.10a-2)
intrepid_squirrelmail: released (1.4.10a-2)
jaunty_squirrelmail: released (1.4.10a-2)
karmic_squirrelmail: released (1.4.10a-2)
devel_squirrelmail: released (1.4.10a-2)
upstream_squirrelmail: needs-triage