critical10.0Public exploit code

CVE-2002-0516

SquirrelMail 1.2.5 and earlier allows authenticated SquirrelMail users to execute arbitrary commands by modifying the THEME variable in a cookie.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

SquirrelMail 1.2.5 and earlier allows authenticated SquirrelMail users to execute arbitrary commands by modifying the THEME variable in a cookie.

Vendor	Product	Affected versions
Squirrelmail	Squirrelmail	Versions 1.2.0, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5