CVE-2007-6348: Code Injection
Published Dec 14, 2007
·Updated
SquirrelMail 1.4.11 and 1.4.12, as distributed on sourceforge.net before 20071213, has been externally modified to create a Trojan Horse that introduces a PHP remote file inclusion vulnerability, which allows remote attackers to execute arbitrary code.
Affected Software
2 affected components
Squirrelmail Squirrelmail=1.4.12
Squirrelmail Squirrelmail=1.4.11
Event History
Dec 14, 2007
CVE Published
07:46 PM
Dec 15, 2007
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-6348?
CVE-2007-6348 has a high severity level as it allows remote attackers to execute arbitrary PHP code.
2
How do I fix CVE-2007-6348?
To fix CVE-2007-6348, you should upgrade to SquirrelMail version 1.4.13 or later.
3
What versions of SquirrelMail are affected by CVE-2007-6348?
CVE-2007-6348 affects SquirrelMail versions 1.4.11 and 1.4.12.
4
What type of vulnerability is CVE-2007-6348?
CVE-2007-6348 is a PHP remote file inclusion vulnerability.
5
Who can exploit CVE-2007-6348?
CVE-2007-6348 can be exploited by remote attackers with the ability to manipulate file inclusion mechanisms.