Dynamic variable evaluation vulnerability in compose.php in SquirrelMail 1.4.0 to 1.4.7 allows remote attackers to overwrite arbitrary program variables and read or write the attachments and preferences of other users.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.3091
Percentile: 0.96522

CVSS Scoring

Affected Products

• cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:*:*:*:*:*:*:*
• cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*
• cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:*:*:*:*:*:*:*
• cpe:2.3:a:squirrelmail:squirrelmail:1.4.3:*:*:*:*:*:*:*
• cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_r3:*:*:*:*:*:*:*
• cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_rc1:*:*:*:*:*:*:*
• cpe:2.3:a:squirrelmail:squirrelmail:1.4.3a:*:*:*:*:*:*:*
• cpe:2.3:a:squirrelmail:squirrelmail:1.4.4:*:*:*:*:*:*:*
• cpe:2.3:a:squirrelmail:squirrelmail:1.4.4_rc1:*:*:*:*:*:*:*
• cpe:2.3:a:squirrelmail:squirrelmail:1.4.5:*:*:*:*:*:*:*
• cpe:2.3:a:squirrelmail:squirrelmail:1.4.6:*:*:*:*:*:*:*
• cpe:2.3:a:squirrelmail:squirrelmail:1.4.6_rc1:*:*:*:*:*:*:*
• cpe:2.3:a:squirrelmail:squirrelmail:1.4.7:*:*:*:*:*:*:*
• cpe:2.3:a:squirrelmail:squirrelmail:1.4_rc1:*:*:*:*:*:*:*
• cpe:2.3:a:squirrelmail:squirrelmail:1.44:*:*:*:*:*:*:*

← Back to Home