CVE

Id
6468  
CVE No.
CVE-2002-2086  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in magicHTML of SquirrelMail before 1.2.6 allow remote attackers to inject arbitrary web script or HTML via (1) "<<script" in unspecified input fields or (2) a javascript: URL in the src attribute of an IMG tag.  
Phase
Assigned (20050714)  
Votes
None (candidate not yet proposed)  
Comments