← back
CVE-2006-4019

CVE-2006-4019

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 9.8%
from disclosure to weapon3653 days
Published on NVDAug 11
1st PoC+3653d
exploitation probability
9.8%top 5% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Dynamic variable evaluation vulnerability in compose.php in SquirrelMail 1.4.0 to 1.4.7 allows remote attackers to overwrite arbitrary program variables and read or write the attachments and preferences of other users.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/43839unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.aschttp://attrition.org/pipermail/vim/2006-August/000970.htmlhttp://docs.info.apple.com/article.html?artnum=306172http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.htmlhttp://marc.info/?l=full-disclosure&m=115532449024178&w=2http://secunia.com/advisories/21354http://secunia.com/advisories/21444http://secunia.com/advisories/21586http://secunia.com/advisories/22080http://secunia.com/advisories/22104http://secunia.com/advisories/22487http://secunia.com/advisories/26235