CVE-2007-6348

SquirrelMail 1.4.11 and 1.4.12, as distributed on sourceforge.net before 20071213, has been externally modified to create a Trojan Horse that introduces a PHP remote file inclusion vulnerability, which allows remote attackers to execute arbitrary code.

Link	Resource
http://www.squirrelmail.org/index.php
http://secunia.com/advisories/28095	Vendor Advisory
http://osvdb.org/42633
http://marc.info/?l=bugtraq&m=119765643909825&w=2
http://marc.info/?l=squirrelmail-devel&m=119756462212214&w=2
http://marc.info/?l=squirrelmail-devel&m=119765235203392&w=2
http://www.securityfocus.com/archive/1/485037/100/0/threaded

Configuration 1

cpe:2.3:a:squirrelmail:squirrelmail:1.4.12:*:*:*:*:*:*:* cpe:2.3:a:squirrelmail:squirrelmail:1.4.11:*:*:*:*:*:*:*

---

Published : 2007-12-14 07:46

Updated : 2018-10-15 09:52

---

NVD link : CVE-2007-6348

Mitre link : CVE-2007-6348

No products.

CWE-94