Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

squirrelmail squirrelmail 1.44 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2005-1769
Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 up to and including 1.4.4 allow remote malicious users to inject arbitrary web script or HTML via unknown attack vectors in (1) the URL or (2) an e-mail message.
Squirrelmail Squirrelmail 1.4.3 Rc1Squirrelmail Squirrelmail 1.4.3aSquirrelmail Squirrelmail 1.44Squirrelmail Squirrelmail 1.4.1Squirrelmail Squirrelmail 1.4.2Squirrelmail Squirrelmail 1.4.3
6.4
CVSSv2
CVE-2006-4019
Dynamic variable evaluation vulnerability in compose.php in SquirrelMail 1.4.0 to 1.4.7 allows remote malicious users to overwrite arbitrary program variables and read or write the attachments and preferences of other users.
Squirrelmail Squirrelmail 1.4.3Squirrelmail Squirrelmail 1.4.3 R3Squirrelmail Squirrelmail 1.4.7Squirrelmail Squirrelmail 1.4 Rc1Squirrelmail Squirrelmail 1.4.0Squirrelmail Squirrelmail 1.4.4 Rc1Squirrelmail Squirrelmail 1.4.5Squirrelmail Squirrelmail 1.4.1Squirrelmail Squirrelmail 1.4.2Squirrelmail Squirrelmail 1.4.6Squirrelmail Squirrelmail 1.4.6 Rc1Squirrelmail Squirrelmail 1.4.3 Rc1Squirrelmail Squirrelmail 1.4.3aSquirrelmail Squirrelmail 1.4.4Squirrelmail Squirrelmail 1.44
4.3
CVSSv2
CVE-2005-0104
Cross-site scripting (XSS) vulnerability in webmail.php in SquirrelMail prior to 1.4.4 allows remote malicious users to inject arbitrary web script or HTML via certain integer variables.
Squirrelmail Squirrelmail 1.0.4Squirrelmail Squirrelmail 1.2.3Squirrelmail Squirrelmail 1.2.1Squirrelmail Squirrelmail 1.2.10Squirrelmail Squirrelmail 1.2.7Squirrelmail Squirrelmail 1.2.8Squirrelmail Squirrelmail 1.2.9Squirrelmail Squirrelmail 1.4.3aSquirrelmail Squirrelmail 1.44Squirrelmail Squirrelmail 1.0.5Squirrelmail Squirrelmail 1.2.0Squirrelmail Squirrelmail 1.2.5Squirrelmail Squirrelmail 1.2.6Squirrelmail Squirrelmail 1.4.3Squirrelmail Squirrelmail 1.4.3 Rc1Squirrelmail Squirrelmail 1.2.4Squirrelmail Squirrelmail 1.4.1Squirrelmail Squirrelmail 1.4.2Squirrelmail Squirrelmail 1.2.11Squirrelmail Squirrelmail 1.2.2Squirrelmail Squirrelmail 1.4Squirrelmail Squirrelmail 1.4.0
4.3
CVSSv2
CVE-2005-2095
options_identities.php in SquirrelMail 1.4.4 and previous versions uses the extract function to process the $_POST variable, which allows remote malicious users to modify or read the preferences of other users, conduct cross-site scripting XSS) attacks, and write arbitrary files.
Squirrelmail Squirrelmail 1.0.5Squirrelmail Squirrelmail 1.2.0Squirrelmail Squirrelmail 1.2.5Squirrelmail Squirrelmail 1.2.6Squirrelmail Squirrelmail 1.4.3Squirrelmail Squirrelmail 1.4.3 Rc1Squirrelmail Squirrelmail 1.2.11Squirrelmail Squirrelmail 1.2.2Squirrelmail Squirrelmail 1.4Squirrelmail Squirrelmail 1.4.0Squirrelmail Squirrelmail 1.2.1Squirrelmail Squirrelmail 1.2.10Squirrelmail Squirrelmail 1.2.7Squirrelmail Squirrelmail 1.2.8Squirrelmail Squirrelmail 1.2.9Squirrelmail Squirrelmail 1.4.3aSquirrelmail Squirrelmail 1.44Squirrelmail Squirrelmail 1.0.4Squirrelmail Squirrelmail 1.2.3Squirrelmail Squirrelmail 1.2.4Squirrelmail Squirrelmail 1.4.1Squirrelmail Squirrelmail 1.4.2
5
CVSSv2
CVE-2010-2813
functions/imap_general.php in SquirrelMail prior to 1.4.21 does not properly handle 8-bit characters in passwords, which allows remote malicious users to cause a denial of service (disk consumption) by making many IMAP login attempts with different usernames, leading to the creat...
Squirrelmail Squirrelmail 1.4.3Squirrelmail Squirrelmail 1.4.0Squirrelmail Squirrelmail 1.4.16Squirrelmail Squirrelmail 1.4.0 Rc1Squirrelmail Squirrelmail 1.4.11Squirrelmail Squirrelmail 1.4.0-r1Squirrelmail Squirrelmail 1.4.15Squirrelmail Squirrelmail 1.4.9aSquirrelmail Squirrelmail 1.4.6Squirrelmail Squirrelmail 1.4.5Squirrelmail Squirrelmail 1.4.2Squirrelmail Squirrelmail 1.4.17Squirrelmail Squirrelmail 1.4.13Squirrelmail Squirrelmail 1.4Squirrelmail Squirrelmail 1.4.18Squirrelmail Squirrelmail 1.4.5 Rc1Squirrelmail Squirrelmail 1.4.15 Rc1Squirrelmail Squirrelmail 1.4.2-r3Squirrelmail Squirrelmail 1.4.2-r2Squirrelmail Squirrelmail 1.4.8Squirrelmail Squirrelmail 1.4.7Squirrelmail Squirrelmail 1.4.3aa
5.8
CVSSv2
CVE-2009-1580
Session fixation vulnerability in SquirrelMail prior to 1.4.18 allows remote malicious users to hijack web sessions via a crafted cookie.
Squirrelmail Squirrelmail 0.3Squirrelmail Squirrelmail 0.3.1Squirrelmail Squirrelmail 1.0.4Squirrelmail Squirrelmail 1.0.5Squirrelmail Squirrelmail 1.2.0Squirrelmail Squirrelmail 1.2.1Squirrelmail Squirrelmail 1.2.7Squirrelmail Squirrelmail 1.2.8Squirrelmail Squirrelmail 1.4.1Squirrelmail Squirrelmail 1.4.10aSquirrelmail Squirrelmail 1.4.2Squirrelmail Squirrelmail 1.4.3Squirrelmail Squirrelmail 1.4.6Squirrelmail Squirrelmail 1.0pre3Squirrelmail Squirrelmail 1.0pre2Squirrelmail Squirrelmail 0.3pre2Squirrelmail Squirrelmail 0.4Squirrelmail Squirrelmail 0.5Squirrelmail Squirrelmail 1.0.6Squirrelmail Squirrelmail 1.1.0Squirrelmail Squirrelmail 1.2.10Squirrelmail Squirrelmail 1.2.11
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-3400deserializationCVE-2024-21788CVE-2023-42433CVE-2024-21841CVE-2024-22095local file inclusionmemory leak
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook