CVE Vulnerabilities

CVE-2002-0516

Published: Aug 12, 2002 | Modified: Sep 05, 2008
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

SquirrelMail 1.2.5 and earlier allows authenticated SquirrelMail users to execute arbitrary commands by modifying the THEME variable in a cookie.

Affected Software

Name Vendor Start Version End Version
Squirrelmail Squirrelmail 1.2.0 1.2.0
Squirrelmail Squirrelmail 1.2.1 1.2.1
Squirrelmail Squirrelmail 1.2.2 1.2.2
Squirrelmail Squirrelmail 1.2.3 1.2.3
Squirrelmail Squirrelmail 1.2.4 1.2.4
Squirrelmail Squirrelmail 1.2.5 1.2.5

References