SquirrelMail WebMail unauthorized access

2006-08-1400:00:00

BUGTRAQ

vulners.com

By changing internal compose.php variables it's possible to access files of settings of different users.

CPENameOperatorVersion
squirrelmaileq1.4

CPE	Name	Operator	Version
	squirrelmail	eq	1.4

References

vulners.com/securityvulns/securityvulns:doc:13871