CVE ID:	CVE-2002-1276
Description:	An incomplete fix for a cross-site scripting (XSS) vulnerability in SquirrelMail 1.2.8 calls the strip_tags function on the PHP_SELF value but does not save the result back to that variable, leaving it open to cross-site scripting attacks.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2002-1276 BugTraq ID: 7019 http://www.securityfocus.com/bid/7019 Debian Security Information: DSA-191 (Google Search) http://www.debian.org/security/2002/dsa-191 RedHat Security Advisories: RHSA-2003:042 http://www.redhat.com/support/errata/RHSA-2003-042.html http://secunia.com/advisories/8220 XForce ISS Database: squirrelmail-striptags-phpself-xss(10634) http://www.iss.net/security_center/static/10634.php