The G/PGP (GPG) Plugin 2.1 and earlier for Squirrelmail allow remote authenticated users to execute arbitrary commands via shell metacharacters in (1) the fpr parameter to the deleteKey function in gpgkeyring.php, as called by (a) importkeyfile.php, (b) importkeytext.php, and (c) keyringmain.php; and (2) the keyserver parameter to the gpgrecvkey function in gpgkeyfunctions.php, as called by gpgoptions.php. NOTE: this issue may overlap CVE-2007-3636.

PHP local file inclusion vulnerability in gpgpopinit.php in the G/PGP (GPG) Plugin before 20070707 for Squirrelmail allows remote attackers to include and execute arbitrary local files, related to the MOD parameter.