Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple directory traversal vulnerabilities in the G/PGP (GPG) Plugin 2.0, and 2.1dev before 20070614, for Squirrelmail allow remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the help parameter to (1) gpg_help.php or (2) gpg_help_base.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SquirrelMail G/PGP加密插件多个远程命令执行漏洞
Vulnerability Description
" SquirrelMail是一个多功能的用PHP4实现的Webmail程序，可运行于Linux/Unix类操作系统下。 SquirrelMail的实现上存在多个输入验证漏洞，远程攻击者可能利用这些漏洞在服务器上执行任意命令。 SquirrelMail中的G/PGP加密插件没有正确地过滤所包含的某些文件，gpg_help.php和gpg_help_base.php文件中可能包含有通过"help" HTTP GET请求参数所提供的本地文件，代码如下： 68 // Help body text is inse
CVSS Information
N/A
Vulnerability Type
N/A