Software
Squirrelmail Squirrelmailcompose.php in SquirrelMail 1.4.22 calls unserialize for the $mailtodata value, which originates fro…
Squirrelmail Squirrelmailcompose.php in SquirrelMail 1.4.22 calls unserialize for the $attachments value, which originates fr…
Squirrelmail Change PasswdSquirrelmail 4.0 uses the outdated MD5 hash algorithm for passwords.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Redhat Enterprise Linuxfunctions/imap_general.php in SquirrelMail, as used in Red Hat Enterprise Linux (RHEL) 4 and 5, does…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Squirrelmail SquirrelmailCode Injection, CRLF Injection
Squirrelmail Squirrelmailfunctions/imap_general.php in SquirrelMail before 1.4.21 does not properly handle 8-bit characters i…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Squirrelmail SquirrelmailSession fixation vulnerability in SquirrelMail before 1.4.18 allows remote attackers to hijack web s…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Squirrelmail SquirrelmailCode Injection, OS Command Injection
Squirrelmail SquirrelmailA certain Red Hat patch for SquirrelMail 1.4.8 sets the same SQMSESSID cookie value for all sessions…
redhat/squirrelmailSquirrelmail 1.4.15 does not set the secure flag for the session cookie in an https session, which c…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Squirrelmail Gpg PluginThe G/PGP (GPG) Plugin 2.0, and 2.1dev before 20060912, for Squirrelmail allows remote attackers to …
Squirrelmail Gpg PluginPHP local file inclusion vulnerability in gpg_pop_init.php in the G/PGP (GPG) Plugin before 20070707…
Squirrelmail Gpg PluginMultiple directory traversal vulnerabilities in the G/PGP (GPG) Plugin 2.0, and 2.1dev before 200706…
Squirrelmail Gpg PluginUnspecified vulnerability in the G/PGP (GPG) Plugin 2.0 for Squirrelmail 1.4.10a allows remote authe…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Squirrelmail SquirrelmailMultiple unspecified vulnerabilities in the G/PGP (GPG) Plugin 2.1 for Squirrelmail allow remote att…
Squirrelmail SquirrelmailMultiple unspecified vulnerabilities in the G/PGP (GPG) Plugin before 2.1 for Squirrelmail might all…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Squirrelmail SquirrelmailDynamic variable evaluation vulnerability in compose.php in SquirrelMail 1.4.0 to 1.4.7 allows remot…
Squirrelmail SquirrelmailPHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1.4.6 and earlier, i…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Squirrelmail Gpg PluginThe G/PGP (GPG) Plugin 2.1 and earlier for Squirrelmail allow remote authenticated users to execute …
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.