SquirrelMail PGP plugin unfiltered shell characters updated since 11.07.2007
Published:		12.07.2007
Source:		SECURITEAM
SecurityVulns ID:		7918
Type:		remote
Level:		6/10
Description:		Unfiltered shell characters on external application invocation in fpr parameter of keyring_main.php script and in different places.

Original document		IDEFENSE, iDefense Security Advisory 07.11.07: SquirrelMail G/PGP Plugin gpg_recv_key() Command Injection Vulnerability (12.07.2007)
		IDEFENSE, iDefense Security Advisory 07.11.07: SquirrelMail G/PGP Plugin deleteKey() Command Injection Vulnerability (12.07.2007)
		IDEFENSE, iDefense Security Advisory 07.11.07: SquirrelMail G/PGP Plugin gpg_help.php Local File Inclusion Vulnerability (12.07.2007)
		IDEFENSE, iDefense Security Advisory 07.11.07: SquirrelMail G/PGP Plugin gpg_check_sign_pgp_mime() Command Injection Vulnerability (12.07.2007)
		does_not_exist_(at)_jmp-esp.kicks-ass.net, SquirrelMail G/PGP Encryption Plug-in Remote Command Execution Vulnerability (11.07.2007)
		SECURITEAM, [EXPL] SquirrelMail G/PGP Encryption Plug-in Remote Command Execution Vulnerability (11.07.2007)

Discuss:

Read or add your comments to this news (0 comments)