Squirrelmail: >> Squirrelmail >> 1.4.6_rc1 Security Vulnerabilities
CRLF injection vulnerability in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary IMAP commands via newline characters in the mailbox parameter of the sqimap_mailbox_select command, aka "IMAP injection."
CVSS Score
5.0
EPSS Score
0.016
Published
2006-02-24
Page 2