7.5
CVE-2007-2631
- EPSS 1.38%
- Veröffentlicht 13.05.2007 23:19:00
- Zuletzt bearbeitet 16.06.2026 22:40:00
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Cross-site request forgery (CSRF) vulnerability in SquirrelMail 1.4.8-4.fc6 and earlier allows remote attackers to perform unspecified actions as arbitrary users via unspecified vectors. NOTE: this issue might overlap CVE-2007-2589 or CVE-2002-1648.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Squirrelmail ≫ Squirrelmail Version <= 1.4.8.4fc6
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.38% | 0.686 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://osvdb.org/35890
http://www.securityfocus.com/archive/1/468220/100/0/threaded
http://www.securityfocus.com/archive/1/468253/100/0/threaded