Patchwire CVEs, their patch status, and feeds to follow them

CVE-2002-1648

No fix known EPSS 3%

Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail before 1.2.3 allows remote attackers to send email as other users via an IMG URL with modified send_to and subject parameters.

Published 2005-03-28 · CVE record · OSV

Products: squirrelmail