← Database

CVE-2003-0990

HIGH CVSS: 7.5 Published: 2004-01-20 Modified: 2026-06-16

Description

The parseAddress code in (1) SquirrelMail 1.4.0 and (2) GPG Plugin 1.1 allows remote attackers to execute commands via shell metacharacters in the "To:" field.

Affected Platforms

Squirrelmail SquirrelmailSquirrelmail Gpg Plugin

Weakness Type

NVD-CWE-Other

References