Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

squirrelmail squirrelmail 1.4 rc1 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2005-2095
options_identities.php in SquirrelMail 1.4.4 and previous versions uses the extract function to process the $_POST variable, which allows remote malicious users to modify or read the preferences of other users, conduct cross-site scripting XSS) attacks, and write arbitrary files.
Squirrelmail Squirrelmail 1.0.5Squirrelmail Squirrelmail 1.2.0Squirrelmail Squirrelmail 1.2.5Squirrelmail Squirrelmail 1.2.6Squirrelmail Squirrelmail 1.4.3Squirrelmail Squirrelmail 1.4.3 Rc1Squirrelmail Squirrelmail 1.2.11Squirrelmail Squirrelmail 1.2.2Squirrelmail Squirrelmail 1.4Squirrelmail Squirrelmail 1.4.0Squirrelmail Squirrelmail 1.2.1Squirrelmail Squirrelmail 1.2.10Squirrelmail Squirrelmail 1.2.7Squirrelmail Squirrelmail 1.2.8Squirrelmail Squirrelmail 1.2.9Squirrelmail Squirrelmail 1.4.3aSquirrelmail Squirrelmail 1.44Squirrelmail Squirrelmail 1.0.4Squirrelmail Squirrelmail 1.2.3Squirrelmail Squirrelmail 1.2.4Squirrelmail Squirrelmail 1.4.1Squirrelmail Squirrelmail 1.4.2
NA
CVE-2004-0521
SQL injection vulnerability in SquirrelMail prior to 1.4.3 RC1 allows remote malicious users to execute unauthorized SQL statements, with unknown impact, probably via abook_database.php.
Squirrelmail Squirrelmail 1.0.5Squirrelmail Squirrelmail 1.2.0Squirrelmail Squirrelmail 1.2.5Squirrelmail Squirrelmail 1.2.6Squirrelmail Squirrelmail 1.2.11Squirrelmail Squirrelmail 1.2.2Squirrelmail Squirrelmail 1.2.9Squirrelmail Squirrelmail 1.4Sgi Propack 3.0Squirrelmail Squirrelmail 1.0.4Squirrelmail Squirrelmail 1.2.3Squirrelmail Squirrelmail 1.2.4Squirrelmail Squirrelmail 1.4.1Squirrelmail Squirrelmail 1.4.2Squirrelmail Squirrelmail 1.2.1Squirrelmail Squirrelmail 1.2.10Squirrelmail Squirrelmail 1.2.7Squirrelmail Squirrelmail 1.2.8
NA
CVE-2009-2964
Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.19 and previous versions, and NaSMail prior to 1.7, allow remote malicious users to hijack the authentication of unspecified victims via features such as send message and change preferences, related to...
Squirrelmail Squirrelmail 1.4.7Squirrelmail Squirrelmail 1.4.6 Rc1Squirrelmail Squirrelmail 1.4.4Squirrelmail Squirrelmail 1.4.3aaSquirrelmail Squirrelmail 1.4 Rc1Squirrelmail Squirrelmail 1.4Squirrelmail Squirrelmail 1.4.6 CvsSquirrelmail Squirrelmail 1.4.6Squirrelmail Squirrelmail 1.4.3aSquirrelmail Squirrelmail 1.4.3 Rc1Squirrelmail Squirrelmail 1.4.2-r4Squirrelmail Squirrelmail 1.4.2-r3Squirrelmail Squirrelmail 1.4.15Squirrelmail Squirrelmail 1.4.12Squirrelmail Squirrelmail 1.4.0Squirrelmail Squirrelmail 1.2.9Squirrelmail Squirrelmail 1.2.8Squirrelmail Squirrelmail 1.2.11Squirrelmail Squirrelmail 1.2.10Squirrelmail Squirrelmail 1.1.2Squirrelmail Squirrelmail 1.1.1Squirrelmail Squirrelmail 1.0.4
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-26978CVE-2024-26982wirelessCVE-2023-6949CVE-2024-26980CVE-2024-32766CVE-2024-26939cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook