Vulnerability in Squirrelmail
CVE-2002-1648
Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail before 1.2.3 allows remote attackers to send email as other users via an IMG URL with modified send_to and subject parameters.
EPSS: 0.034 (87.7th percentile) — read the EPSS interpretation.
Affected products
- Squirrelmail — versions 1.2.2
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
- cve@mitre.org (mailing-list, Exploit, x_refsource_BUGTRAQ)