VULNERABILITY INTELLIGENCE

CVE-2005-0075

CVSS score5 MEDIUM
EPSS probability1.68%
CISA KEVNot currently listed
Published2005-01-29
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

prefs.php in SquirrelMail before 1.4.4, with register_globals enabled, allows remote attackers to inject local code into the SquirrelMail code via custom preference handlers.

Primary references