Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2007-2589

Опубликовано: 09 мая 2007
Источник: redhat
EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail 1.4.0 through 1.4.9a allows remote attackers to send e-mails from arbitrary users via certain data in the SRC attribute of an IMG element.

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-352
https://bugzilla.redhat.com/show_bug.cgi?id=239828CSRF through HTML message in squirrelmail

EPSS

Процентиль: 77%
0.01047
Низкий

Связанные уязвимости

ubuntu
около 18 лет назад

Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail 1.4.0 through 1.4.9a allows remote attackers to send e-mails from arbitrary users via certain data in the SRC attribute of an IMG element.

nvd
около 18 лет назад

Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail 1.4.0 through 1.4.9a allows remote attackers to send e-mails from arbitrary users via certain data in the SRC attribute of an IMG element.

debian
около 18 лет назад

Cross-site request forgery (CSRF) vulnerability in compose.php in Squi ...

github
больше 3 лет назад

Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail 1.4.0 through 1.4.9a allows remote attackers to send e-mails from arbitrary users via certain data in the SRC attribute of an IMG element.

oracle-oval
около 18 лет назад

ELSA-2007-0358: Moderate: squirrelmail security update (MODERATE)

EPSS

Процентиль: 77%
0.01047
Низкий