Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The G/PGP (GPG) Plugin 2.1 and earlier for Squirrelmail allow remote authenticated users to execute arbitrary commands via shell metacharacters in (1) the fpr parameter to the deleteKey function in gpg_keyring.php, as called by (a) import_key_file.php, (b) import_key_text.php, and (c) keyring_main.php; and (2) the keyserver parameter to the gpg_recv_key function in gpg_key_functions.php, as called by gpg_options.php. NOTE: this issue may overlap CVE-2007-3636.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SquirrelMail G/PGP加密插件多个远程命令执行漏洞
Vulnerability Description
SquirrelMail是一个多功能的用PHP4实现的Webmail程序，可运行于Linux/Unix类操作系统下。 SquirrelMail的实现上存在多个输入验证漏洞，远程攻击者可能利用这些漏洞在服务器上执行任意命令。SquirrelMail中的G/PGP加密插件没有正确地过滤所包含的某些文件，gpg_help.php和gpg_help_base.php文件中可能包含有通过""help"" HTTP GET请求参数所提供的本地文件。
CVSS Information
N/A
Vulnerability Type
N/A