EDB-43830

PoC

SquirrelMail < 1.4.5-RC1 - Arbitrary Variable Overwrite

view exploit source exploit_dbtype webappsauthor GulfTech Securitypublished 2015-07-14catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2005-2095USmedium4.3Exploit
options_identities.php in SquirrelMail 1.4.4 and earlier uses the extract function to process the $_POST variable, which allows remote attackers to modify or read the preferences o…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan