high7.5Public exploit code
CVE-2007-3636
Multiple unspecified vulnerabilities in the G/PGP (GPG) Plugin 2.1 for Squirrelmail allow remote attackers to execute arbitrary commands via unspecified vector…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SquirrelMail G/PGP Encryption Plugin 2.0/2.1 - Multiple Remote Command Execution Vulnerabilities2007-07-09 · webapps · php · Verified
Impact
Multiple unspecified vulnerabilities in the G/PGP (GPG) Plugin 2.1 for Squirrelmail allow remote attackers to execute arbitrary commands via unspecified vectors. NOTE: this information is based upon a vague pre-advisory from a reliable researcher.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Squirrelmail | Gpg Plugin | Version 2.0 |
| Squirrelmail | Squirrelmail | Version 1.4.10a |
References
- NVD record
- CVE.org record
- http://lists.immunitysec.com/pipermail/dailydave/2007-July/004453.html
- http://osvdb.org/45790
- http://www.attrition.org/pipermail/vim/2007-July/001703.html
- http://www.securityfocus.com/bid/24828
- http://lists.immunitysec.com/pipermail/dailydave/2007-July/004453.html
- http://osvdb.org/45790
- http://www.attrition.org/pipermail/vim/2007-July/001703.html
- http://www.securityfocus.com/bid/24828