Unrated severityNVD Advisory· Published Nov 29, 2002· Updated Jun 16, 2026
CVE-2002-1276
CVE-2002-1276
Description
An incomplete fix for a cross-site scripting (XSS) vulnerability in SquirrelMail 1.2.8 calls the strip_tags function on the PHP_SELF value but does not save the result back to that variable, leaving it open to cross-site scripting attacks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*
- (no CPE)range: =1.2.8
Patches
Vulnerability mechanics
References
6- bugs.debian.org/cgi-bin/bugreport.cginvdPatchVendor Advisory
- www.redhat.com/support/errata/RHSA-2003-042.htmlnvdPatchVendor Advisory
- www.debian.org/security/2002/dsa-191nvdVendor Advisory
- secunia.com/advisories/8220nvd
- www.iss.net/security_center/static/10634.phpnvd
- www.securityfocus.com/bid/7019nvd
News mentions
0No linked articles in our index yet.