CVE-2002-0516

CRITICAL CVSS: 10.0 Published: 2002-08-12 Modified: 2026-06-16

Description

SquirrelMail 1.2.5 and earlier allows authenticated SquirrelMail users to execute arbitrary commands by modifying the THEME variable in a cookie.

Affected Platforms

Squirrelmail Squirrelmail

Weakness Type

NVD-CWE-Other

References