Unscored CVE-2002-1648 EUVD-2002-1629GHSA-777c-m2xj-3qhf

Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail before 1.2.3 allows remote attackers to send email as other …

Published Mar 28, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail before 1.2.3 allows remote attackers to send email as other users via an IMG URL with modified send_to and subject parameters.

References

squirrelmail-html-execute-script(7989) vdb-entry
VU#153043 third-party-advisory
3956 vdb-entry
20020124 Vulnerabilities in squirrelmail mailing-list