4.3

CVE-2010-4554

functions/page_header.php in SquirrelMail 1.4.21 and earlier does not prevent page rendering inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.

Data is provided by the National Vulnerability Database (NVD)
Squirrelmail ≫ Squirrelmail Version <= 1.4.21
Squirrelmail ≫ Squirrelmail Version0.1
Squirrelmail ≫ Squirrelmail Version0.1.1
Squirrelmail ≫ Squirrelmail Version0.1.2
Squirrelmail ≫ Squirrelmail Version0.2
Squirrelmail ≫ Squirrelmail Version0.2.1
Squirrelmail ≫ Squirrelmail Version0.3
Squirrelmail ≫ Squirrelmail Version0.3.1
Squirrelmail ≫ Squirrelmail Version0.3pre1
Squirrelmail ≫ Squirrelmail Version0.3pre2
Squirrelmail ≫ Squirrelmail Version0.4
Squirrelmail ≫ Squirrelmail Version0.4pre1
Squirrelmail ≫ Squirrelmail Version0.4pre2
Squirrelmail ≫ Squirrelmail Version0.5
Squirrelmail ≫ Squirrelmail Version0.5pre1
Squirrelmail ≫ Squirrelmail Version0.5pre2
Squirrelmail ≫ Squirrelmail Version1.0
Squirrelmail ≫ Squirrelmail Version1.0.1
Squirrelmail ≫ Squirrelmail Version1.0.2
Squirrelmail ≫ Squirrelmail Version1.0.3
Squirrelmail ≫ Squirrelmail Version1.0.4
Squirrelmail ≫ Squirrelmail Version1.0.5
Squirrelmail ≫ Squirrelmail Version1.0.6
Squirrelmail ≫ Squirrelmail Version1.0pre1
Squirrelmail ≫ Squirrelmail Version1.0pre2
Squirrelmail ≫ Squirrelmail Version1.0pre3
Squirrelmail ≫ Squirrelmail Version1.1.0
Squirrelmail ≫ Squirrelmail Version1.1.1
Squirrelmail ≫ Squirrelmail Version1.1.2
Squirrelmail ≫ Squirrelmail Version1.1.3
Squirrelmail ≫ Squirrelmail Version1.2
Squirrelmail ≫ Squirrelmail Version1.2.0
Squirrelmail ≫ Squirrelmail Version1.2.0 Updaterc3
Squirrelmail ≫ Squirrelmail Version1.2.1
Squirrelmail ≫ Squirrelmail Version1.2.2
Squirrelmail ≫ Squirrelmail Version1.2.3
Squirrelmail ≫ Squirrelmail Version1.2.4
Squirrelmail ≫ Squirrelmail Version1.2.5
Squirrelmail ≫ Squirrelmail Version1.2.6
Squirrelmail ≫ Squirrelmail Version1.2.6 Updaterc1
Squirrelmail ≫ Squirrelmail Version1.2.7
Squirrelmail ≫ Squirrelmail Version1.2.8
Squirrelmail ≫ Squirrelmail Version1.2.9
Squirrelmail ≫ Squirrelmail Version1.2.10
Squirrelmail ≫ Squirrelmail Version1.2.11
Squirrelmail ≫ Squirrelmail Version1.3.0
Squirrelmail ≫ Squirrelmail Version1.3.1
Squirrelmail ≫ Squirrelmail Version1.3.2
Squirrelmail ≫ Squirrelmail Version1.4
Squirrelmail ≫ Squirrelmail Version1.4 Updaterc1
Squirrelmail ≫ Squirrelmail Version1.4.0
Squirrelmail ≫ Squirrelmail Version1.4.0 Updaterc1
Squirrelmail ≫ Squirrelmail Version1.4.0 Updaterc2a
Squirrelmail ≫ Squirrelmail Version1.4.0-r1
Squirrelmail ≫ Squirrelmail Version1.4.1
Squirrelmail ≫ Squirrelmail Version1.4.2
Squirrelmail ≫ Squirrelmail Version1.4.2-r1
Squirrelmail ≫ Squirrelmail Version1.4.2-r2
Squirrelmail ≫ Squirrelmail Version1.4.2-r3
Squirrelmail ≫ Squirrelmail Version1.4.2-r4
Squirrelmail ≫ Squirrelmail Version1.4.2-r5
Squirrelmail ≫ Squirrelmail Version1.4.3
Squirrelmail ≫ Squirrelmail Version1.4.3 Updater3
Squirrelmail ≫ Squirrelmail Version1.4.3 Updaterc1
Squirrelmail ≫ Squirrelmail Version1.4.3a
Squirrelmail ≫ Squirrelmail Version1.4.3aa
Squirrelmail ≫ Squirrelmail Version1.4.4
Squirrelmail ≫ Squirrelmail Version1.4.4 Updaterc1
Squirrelmail ≫ Squirrelmail Version1.4.5
Squirrelmail ≫ Squirrelmail Version1.4.5 Updaterc1
Squirrelmail ≫ Squirrelmail Version1.4.6
Squirrelmail ≫ Squirrelmail Version1.4.6 Updaterc1
Squirrelmail ≫ Squirrelmail Version1.4.6_cvs
Squirrelmail ≫ Squirrelmail Version1.4.7
Squirrelmail ≫ Squirrelmail Version1.4.8
Squirrelmail ≫ Squirrelmail Version1.4.8.4fc6
Squirrelmail ≫ Squirrelmail Version1.4.9
Squirrelmail ≫ Squirrelmail Version1.4.9a
Squirrelmail ≫ Squirrelmail Version1.4.10
Squirrelmail ≫ Squirrelmail Version1.4.10a
Squirrelmail ≫ Squirrelmail Version1.4.11
Squirrelmail ≫ Squirrelmail Version1.4.12
Squirrelmail ≫ Squirrelmail Version1.4.13
Squirrelmail ≫ Squirrelmail Version1.4.15
Squirrelmail ≫ Squirrelmail Version1.4.15 Updaterc1
Squirrelmail ≫ Squirrelmail Version1.4.15rc1
Squirrelmail ≫ Squirrelmail Version1.4.16
Squirrelmail ≫ Squirrelmail Version1.4.17
Squirrelmail ≫ Squirrelmail Version1.4.18
Squirrelmail ≫ Squirrelmail Version1.4.19
Squirrelmail ≫ Squirrelmail Version1.4.20
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.47% 0.639
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.