CVE-2004-0521
Fixed in a distro release EPSS 3%
SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statements, with unknown impact, probably via abook_database.php.
Products: sgi propack, squirrelmail
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.0 | squirrelmail | 1:1.2.6-1.4 |
| Red Hat Enterprise Linux 3 | squirrelmail | 0:1.4.3-0.e3.1 |