The parseAddress code in (1) SquirrelMail 1.4.0 and (2) GPG Plugin 1.1 allows remote attackers to execute commands via shell metacharacters in the "To:" field.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2004-01-20 05:00
Updated : 2024-02-04 16:31
NVD link : CVE-2003-0990
Mitre link : CVE-2003-0990
CVE.ORG link : CVE-2003-0990
JSON object : View
Products Affected
squirrelmail
- squirrelmail
- gpg_plugin
CWE