CVE-2002-0516 : SquirrelMail 1.2.5 and earlier allows authenticated SquirrelMail users to execut

SquirrelMail 1.2.5 and earlier allows authenticated SquirrelMail users to execute arbitrary commands by modifying the THEME variable in a cookie.

Published 2002-08-12 04:00:00

Updated 2008-09-05 20:28:14

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2002-0516

Squirrelmail » Squirrelmail » Version: 1.2.0
cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*
Matching versions
Squirrelmail » Squirrelmail » Version: 1.2.1
cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*
Matching versions
Squirrelmail » Squirrelmail » Version: 1.2.2
cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*
Matching versions
Squirrelmail » Squirrelmail » Version: 1.2.3
cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*
Matching versions
Squirrelmail » Squirrelmail » Version: 1.2.5
cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*
Matching versions
Squirrelmail » Squirrelmail » Version: 1.2.4
cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

1.22%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 85 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

Jump to