CVE-2002-1131

Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via (1) addressbook.php, (2) options.php, (3) search.php, or (4) help.php.

• http://archives.neohapsis.com/archives/bugtraq/2002-09/0246.htmlExploit, Vendor Advisory
• http://sourceforge.net/project/shownotes.php?group_id=311&release_id=110774
• http://www.debian.org/security/2002/dsa-191
• http://www.iss.net/security_center/static/10145.phpVendor Advisory
• http://www.redhat.com/support/errata/RHSA-2002-204.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/5763Exploit, Patch, Vendor Advisory
• http://archives.neohapsis.com/archives/bugtraq/2002-09/0246.htmlExploit, Vendor Advisory
• http://sourceforge.net/project/shownotes.php?group_id=311&release_id=110774
• http://www.debian.org/security/2002/dsa-191
• http://www.iss.net/security_center/static/10145.phpVendor Advisory
• http://www.redhat.com/support/errata/RHSA-2002-204.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/5763Exploit, Patch, Vendor Advisory

Published

Oct 4, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-1124Multiple buffer overflows in purity 1-16 allow local users t…
• CVE-2002-1125FreeBSD port programs that use libkvm for FreeBSD 4.6.2-RELE…
• CVE-2002-1126Mozilla 1.1 and earlier, and Mozilla-based browsers such as …
• CVE-2002-1127Buffer overflow in uucp in Compaq Tru64/OSF1 3.x allows loca…
• CVE-2002-1128Buffer overflow in inc mail utility for Compaq Tru64/OSF1 3.…
• CVE-2002-1129Buffer overflow in dxterm allows local users to execute arbi…
• CVE-2002-1132SquirrelMail 1.2.7 and earlier allows remote attackers to de…
• CVE-2002-1133Encoded directory traversal vulnerability in Dino's web serv…
• CVE-2002-1134Unknown vulnerability in Compaq WEBES Service Tools 2.0 thro…
• CVE-2002-1135modsecurity.php 1.10 and earlier, in phpWebSite 0.8.2 and ea…
• CVE-2002-1137Buffer overflow in the Database Console Command (DBCC) that …
• CVE-2002-1138Microsoft SQL Server 7.0 and 2000, including Microsoft Data …