SquirrelMail: IMAP commands injection attempt
Description
Using a specially crafted mailbox parameter, an attacker could execute IMAP commands on the server.
Default
configuration
Profiles
High
Medium
Low
Internet
Action
Block
Block
Block
Block
Alarm Level
Major
Minor
Minor
Major
References
URL:
http://www.frsirt.com/english/advisories/2006/0689
Available since
ASQ v3.2.0
Protects
SquirrelMail Multiple Cross Site Scripting and IMAP Injection Vulnerabilities
100 last CVE
CVE-2006-0377
CVE-2006-0195
CVE-2006-0188
Risk level
Moderate