Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
load_prefs.php and supporting include files in SquirrelMail 1.0.4 and earlier do not properly initialize certain PHP variables, which allows remote attackers to (1) view sensitive files via the config_php and data_dir options, and (2) execute arbitrary code by using options_order.php to upload a message that could be interpreted as PHP.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SquirrelMail远程命令执行漏洞
Vulnerability Description
SquirrelMail 1.0.4及其早期版本中的load_prefs.php和支持包括文件不能正确初始化某些PHP变量，远程攻击者可以(1)借助config_php和data_dir选项观察敏感信息(2)通过使用options_order.php来上传可能被看做PHP的信息执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A