Unscored CVE-2006-4169 EUVD-2006-4159GHSA-rjqq-xg2f-4c6w

Multiple directory traversal vulnerabilities in the G/PGP (GPG) Plugin 2.0, and 2.1dev before 20070614, for Squirrelmail allow remote authe…

Published Jul 15, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple directory traversal vulnerabilities in the G/PGP (GPG) Plugin 2.0, and 2.1dev before 20070614, for Squirrelmail allow remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the help parameter to (1) gpg_help.php or (2) gpg_help_base.php.

References

26035 third-party-advisory
26424 third-party-advisory
20070711 SquirrelMail G/PGP Plugin gpg_help.php Local File Inclusion Vulnerability third-party-advisory
37933 vdb-entry
37932 vdb-entry
24874 vdb-entry
ADV-2007-2513 vdb-entry
GLSA-200708-08 vendor-advisory
squirrelmail-gpgp-help-file-include(35362) vdb-entry