Vulnerabilities > CVE-2002-0516 - Remote Command Execution vulnerability in SquirrelMail Theme

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
squirrelmail
critical
exploit available
NVD
Published: 2002-08-12
Updated: 2008-09-05

Summary

SquirrelMail 1.2.5 and earlier allows authenticated SquirrelMail users to execute arbitrary commands by modifying the THEME variable in a cookie.

Vulnerable Configurations

Part Description Count
Application
Squirrelmail
6

Exploit-Db

descriptionSquirrelMail 1.2.x Theme Remote Command Execution Vulnerability. CVE-2002-0516 . Webapps exploit for php platform
idEDB-ID:21358
last seen2016-02-02
modified2002-03-28
published2002-03-28
reporterpokleyzz sakamaniaka
sourcehttps://www.exploit-db.com/download/21358/
titleSquirrelMail 1.2.x Theme Remote Command Execution Vulnerability

References