CVE		CVE-2010-4554
Статус		UNKNOWN
Описание		functions/page_header.php in SquirrelMail 1.4.21 and earlier does not prevent page rendering inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.
Важность		Medium
CVSS score		4,3
CVSS vector		(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Phase		ASSIGNED (13.02.2012)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4554
References		CONFIRM : http://squirrelmail.svn.sourceforge.net/viewvc/squ...
		CONFIRM : http://www.squirrelmail.org/security/issue/2011-07-12
		CONFIRM : https://bugzilla.redhat.com/show_bug.cgi?id=720693
		XF : squirrelmail-http-clickjacking(68512)
SecurityVulns:		Cводка уязвимостей безопасности в Web-приложениях (PHP, ASP, JSP, CGI, Perl)
		Многочисленные уязвимости безопасности в Apple OS X