Unscored CVE-2005-0239 EUVD-2005-0240GHSA-872m-5w27-hc4r

viewcert.php in the S/MIME plugin 0.4 and 0.5 for Squirrelmail allows remote attackers to execute arbitrary commands via shell metacharacte…

Published Feb 7, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

viewcert.php in the S/MIME plugin 0.4 and 0.5 for Squirrelmail allows remote attackers to execute arbitrary commands via shell metacharacters in the cert parameter.

References

squirrelmail-smime-command-execution(19242) vdb-entry
VU#502328 third-party-advisory
20050207 SquirrelMail S/MIME Plugin Command Injection Vulnerability third-party-advisory
http://www.squirrelmail.org/plugin_view.php?id=54