Login Request a demo
Unscored severity · published Aug 18, 2004
CVE-2004-0521
SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statements, with unknown impact, probably via abook_database.php
–
CVSS
3.2%
EPSS
No
On KEV
Description
SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statements, with unknown impact, probably via abook_database.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.2% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PR
Propack · Sgi
3.0 · source: NVD
SQ
Squirrelmail · Squirrelmail
1.0.4; 1.0.5; 1.2.0; 1.2.1; 1.2.2; 1.2.3; +11 more · source: NVD
Affected product
PR
Propack
Sgi
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0521
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0521
distro.conectiva.com.br
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858
marc.info
http://marc.info/?l=squirrelmail-cvs&m=108309375029888
marc.info
http://marc.info/?l=squirrelmail-cvs&m=108532891231712
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2004-240.html
secunia.com
http://secunia.com/advisories/11685
More from Propack
7.5
CVE-2004-0079
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake…
–
CVE-2006-1167
SGI ProPack 3 SP6 kernel displays the frame buffer contents of the last session after a reboot, which might allow local users to obtain sensitive information
–
CVE-2005-3624
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via…
–
CVE-2005-3625
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams…
–
CVE-2005-3626
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted…