Published: 10/07/2007 Updated: 15/11/2008

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple unspecified vulnerabilities in the G/PGP (GPG) Plugin 2.1 for Squirrelmail allow remote malicious users to execute arbitrary commands via unspecified vectors. NOTE: this information is based upon a vague pre-advisory from a reliable researcher.

Vulnerable Product	Search on Vulmon	Subscribe to Product
squirrelmail gpg plugin 2.0
squirrelmail squirrelmail 1.4.10a

source: wwwsecurityfocuscom/bid/24828/info Vulnerabilities in the SquirrelMail G/PGP encryption plugin may allow malicious webmail users to execute system commands remotely These issues occur because the application fails to sufficiently sanitize user-supplied data Commands would run in the context of the webserver hosting the vulnerab ...

NVD-CWE-Other http://lists.immunitysec.com/pipermail/dailydave/2007-July/004453.html http://www.attrition.org/pipermail/vim/2007-July/001703.html http://www.securityfocus.com/bid/24828 http://osvdb.org/45790 https://nvd.nist.gov https://www.exploit-db.com/exploits/30283/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-3636

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect