EDB-41910

PoC

SquirrelMail < 1.4.22 - Remote Code Execution

view exploit source exploit_dbtype remoteauthor Dawid Golunskipublished 2017-04-23catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2017-7692UShigh8.8Exploit
SquirrelMail 1.4.22 (and other versions before 20170427_0200-SVN) allows post-authentication remote code execution via a sendmail.cf file that is mishandled in a popen call. It's p…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan