Lucene search
Veracode Vulnerability DatabaseVERACODE:20740HistoryJul 09, 2019 - 6:36 a.m.
Code Injection
2019-07-0906:36:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
EPSS
0.006
Percentile
78.7%
SquirrelMail is vulnerable to code injection. With register_globals enabled, an attacker could inject arbitrary code via custom preference handles in prefs.php and may cause the code to be executed with application privilege.
References
lists.apple.com/archives/security-announce/2005/Mar/msg00000.html
marc.info/?l=bugtraq&m=110702772714662&w=2
secunia.com/advisories/13962/
www.gentoo.org/security/en/glsa/glsa-200501-39.xml
www.redhat.com/support/errata/RHSA-2005-099.html
www.redhat.com/support/errata/RHSA-2005-135.html
www.squirrelmail.org/security/issue/2005-01-14
bugzilla.redhat.com/show_bug.cgi?id=1617443
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9587
www.squirrelmail.org/changelog.php
Related
cvelist
cvelist
CVE-2005-0075
2005-02-06 05:00:00
nvd
nvd
CVE-2005-0075
2005-01-29 05:00:00
cve
cve
CVE-2005-0075
2005-02-06 05:00:00
ubuntucve
ubuntucve
CVE-2005-0075
2005-01-29 00:00:00
gentoo
gentoo
SquirrelMail: Multiple vulnerabilities
2005-01-28 00:00:00
nessus
nessus
GLSA-200501-39 : SquirrelMail: Multiple vulnerabilities
2005-02-14 00:00:00
RHEL 4 : squirrelmail (RHSA-2005:099)
2005-02-22 00:00:00
SquirrelMail < 1.4.4 Multiple Vulnerabilities
2005-01-24 00:00:00
openvas
openvas
SquirrelMail < 1.4.4 XSS Vulnerabilities
2005-11-03 00:00:00
Gentoo Security Advisory GLSA 200501-39 (SquirrelMail)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200501-39 (SquirrelMail)
2008-09-24 00:00:00
redhat
redhat
(RHSA-2005:135) squirrelmail security update
2005-02-10 00:00:00
(RHSA-2005:099) squirrelmail security update
2005-02-15 00:00:00
freebsd
freebsd
squirrelmail -- XSS and remote code injection vulnerabilities
2005-01-29 00:00:00