Filter
Software
Squirrelmail Squirrelmailcompose.php in SquirrelMail 1.4.22 calls unserialize for the $mailtodata value, which originates fro…
9.8
First published (updated )
Squirrelmail Squirrelmailcompose.php in SquirrelMail 1.4.22 calls unserialize for the $attachments value, which originates fr…
8.8
First published (updated )
Squirrelmail Change PasswdSquirrelmail 4.0 uses the outdated MD5 hash algorithm for passwords.
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Redhat Enterprise Linuxfunctions/imap_general.php in SquirrelMail, as used in Red Hat Enterprise Linux (RHEL) 4 and 5, does…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Squirrelmail SquirrelmailCode Injection, CRLF Injection
5.8
First published (updated )
Squirrelmail Squirrelmailfunctions/imap_general.php in SquirrelMail before 1.4.21 does not properly handle 8-bit characters i…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Squirrelmail SquirrelmailSession fixation vulnerability in SquirrelMail before 1.4.18 allows remote attackers to hijack web s…
5.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Squirrelmail SquirrelmailCode Injection, OS Command Injection
6.8
First published (updated )
Squirrelmail SquirrelmailA certain Red Hat patch for SquirrelMail 1.4.8 sets the same SQMSESSID cookie value for all sessions…
6.5
First published (updated )
redhat/squirrelmailSquirrelmail 1.4.15 does not set the secure flag for the session cookie in an https session, which c…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.