Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2007-2589

Опубликовано: 09 мая 2007
Источник: redhat
EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail 1.4.0 through 1.4.9a allows remote attackers to send e-mails from arbitrary users via certain data in the SRC attribute of an IMG element.

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-352
https://bugzilla.redhat.com/show_bug.cgi?id=239828CSRF through HTML message in squirrelmail

EPSS

Процентиль: 79%
0.01197
Низкий

Связанные уязвимости

ubuntu
почти 19 лет назад

Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail 1.4.0 through 1.4.9a allows remote attackers to send e-mails from arbitrary users via certain data in the SRC attribute of an IMG element.

nvd
почти 19 лет назад

Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail 1.4.0 through 1.4.9a allows remote attackers to send e-mails from arbitrary users via certain data in the SRC attribute of an IMG element.

debian
почти 19 лет назад

Cross-site request forgery (CSRF) vulnerability in compose.php in Squi ...

github
почти 4 года назад

Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail 1.4.0 through 1.4.9a allows remote attackers to send e-mails from arbitrary users via certain data in the SRC attribute of an IMG element.

oracle-oval
почти 19 лет назад

ELSA-2007-0358: Moderate: squirrelmail security update (MODERATE)

EPSS

Процентиль: 79%
0.01197
Низкий