CVE-2003-0990
43Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 29%
from disclosure to weapon2423 days
Published on NVDJan 6
1st PoC+2423d
metasploit+1280d
exploitation probability
29%top 2% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
The parseAddress code in (1) SquirrelMail 1.4.0 and (2) GPG Plugin 1.1 allows remote attackers to execute commands via shell metacharacters in the "To:" field.
Affected products
n/a · n/apublic PoCs found — 1
exploitdbwww.exploit-db.com/exploits/16888unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.