SquirrelMail WebMail unauthorized access
Published:		14.08.2006
Source:		BUGTRAQ
SecurityVulns ID:		6487
Type:		remote
Level:		6/10
Description:		By changing internal compose.php variables it's possible to access files of settings of different users.

Affected:

SQUIRRELMAIL : Squirrelmail 1.4

Original document

Thijs Kinkhorst, SquirrelMail 1.4.8 released - fixes variable overwriting attack (14.08.2006)

Discuss:

Read or add your comments to this news (0 comments)