Login Request a demo
SQ
Product
Squirrelmail
by Squirrelmail · last CVE Jun 20, 2020
64
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities64In the news0Timeline
Severity mix
Critical 1High 3Medium 8Low 0
Severity
All severities64Critical1High3Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Squirrelmail to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-14933
8.8
1%
Jun 20
compose.php in SquirrelMail 1.4.22 calls unserialize for the $attachments value, which originates from an HTTP POST request
Affected: 1.4.22
CVE-2018-8741
8.8
4%
Mar 17
A directory traversal flaw in SquirrelMail 1.4.22 allows an authenticated attacker to exfiltrate (or potentially delete) files from the hosting server, related to ../ in the…
Affected: 1.4.22
CVE-2017-7692
8.8
32%
Apr 20
SquirrelMail 1.4.22 (and other versions before 20170427_0200-SVN) allows post-authentication remote code execution via a sendmail.cf file that is mishandled in a popen call
Affected: 1.4.22
Showing 3