6.8

CVE-2011-2753

Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.21 and earlier allow remote attackers to hijack the authentication of unspecified victims via vectors involving (1) the empty trash implementation and (2) the Index Order (aka options_order) page, a different issue than CVE-2010-4555.

Data is provided by the National Vulnerability Database (NVD)
Squirrelmail ≫ Squirrelmail Version <= 1.4.21
Squirrelmail ≫ Squirrelmail Version0.1
Squirrelmail ≫ Squirrelmail Version0.1.1
Squirrelmail ≫ Squirrelmail Version0.1.2
Squirrelmail ≫ Squirrelmail Version0.2
Squirrelmail ≫ Squirrelmail Version0.2.1
Squirrelmail ≫ Squirrelmail Version0.3
Squirrelmail ≫ Squirrelmail Version0.3.1
Squirrelmail ≫ Squirrelmail Version0.3pre1
Squirrelmail ≫ Squirrelmail Version0.3pre2
Squirrelmail ≫ Squirrelmail Version0.4
Squirrelmail ≫ Squirrelmail Version0.4pre1
Squirrelmail ≫ Squirrelmail Version0.4pre2
Squirrelmail ≫ Squirrelmail Version0.5
Squirrelmail ≫ Squirrelmail Version0.5pre1
Squirrelmail ≫ Squirrelmail Version0.5pre2
Squirrelmail ≫ Squirrelmail Version1.0
Squirrelmail ≫ Squirrelmail Version1.0.1
Squirrelmail ≫ Squirrelmail Version1.0.2
Squirrelmail ≫ Squirrelmail Version1.0.3
Squirrelmail ≫ Squirrelmail Version1.0.4
Squirrelmail ≫ Squirrelmail Version1.0.5
Squirrelmail ≫ Squirrelmail Version1.0.6
Squirrelmail ≫ Squirrelmail Version1.0pre1
Squirrelmail ≫ Squirrelmail Version1.0pre2
Squirrelmail ≫ Squirrelmail Version1.0pre3
Squirrelmail ≫ Squirrelmail Version1.1.0
Squirrelmail ≫ Squirrelmail Version1.1.1
Squirrelmail ≫ Squirrelmail Version1.1.2
Squirrelmail ≫ Squirrelmail Version1.1.3
Squirrelmail ≫ Squirrelmail Version1.2
Squirrelmail ≫ Squirrelmail Version1.2.0
Squirrelmail ≫ Squirrelmail Version1.2.0 Updaterc3
Squirrelmail ≫ Squirrelmail Version1.2.1
Squirrelmail ≫ Squirrelmail Version1.2.2
Squirrelmail ≫ Squirrelmail Version1.2.3
Squirrelmail ≫ Squirrelmail Version1.2.4
Squirrelmail ≫ Squirrelmail Version1.2.5
Squirrelmail ≫ Squirrelmail Version1.2.6
Squirrelmail ≫ Squirrelmail Version1.2.6 Updaterc1
Squirrelmail ≫ Squirrelmail Version1.2.7
Squirrelmail ≫ Squirrelmail Version1.2.8
Squirrelmail ≫ Squirrelmail Version1.2.9
Squirrelmail ≫ Squirrelmail Version1.2.10
Squirrelmail ≫ Squirrelmail Version1.2.11
Squirrelmail ≫ Squirrelmail Version1.3.0
Squirrelmail ≫ Squirrelmail Version1.3.1
Squirrelmail ≫ Squirrelmail Version1.3.2
Squirrelmail ≫ Squirrelmail Version1.4
Squirrelmail ≫ Squirrelmail Version1.4 Updaterc1
Squirrelmail ≫ Squirrelmail Version1.4.0
Squirrelmail ≫ Squirrelmail Version1.4.0 Updaterc1
Squirrelmail ≫ Squirrelmail Version1.4.0 Updaterc2a
Squirrelmail ≫ Squirrelmail Version1.4.0-r1
Squirrelmail ≫ Squirrelmail Version1.4.1
Squirrelmail ≫ Squirrelmail Version1.4.2
Squirrelmail ≫ Squirrelmail Version1.4.2-r1
Squirrelmail ≫ Squirrelmail Version1.4.2-r2
Squirrelmail ≫ Squirrelmail Version1.4.2-r3
Squirrelmail ≫ Squirrelmail Version1.4.2-r4
Squirrelmail ≫ Squirrelmail Version1.4.2-r5
Squirrelmail ≫ Squirrelmail Version1.4.3
Squirrelmail ≫ Squirrelmail Version1.4.3 Updater3
Squirrelmail ≫ Squirrelmail Version1.4.3 Updaterc1
Squirrelmail ≫ Squirrelmail Version1.4.3a
Squirrelmail ≫ Squirrelmail Version1.4.3aa
Squirrelmail ≫ Squirrelmail Version1.4.4
Squirrelmail ≫ Squirrelmail Version1.4.4 Updaterc1
Squirrelmail ≫ Squirrelmail Version1.4.5
Squirrelmail ≫ Squirrelmail Version1.4.5 Updaterc1
Squirrelmail ≫ Squirrelmail Version1.4.6
Squirrelmail ≫ Squirrelmail Version1.4.6 Updaterc1
Squirrelmail ≫ Squirrelmail Version1.4.6_cvs
Squirrelmail ≫ Squirrelmail Version1.4.7
Squirrelmail ≫ Squirrelmail Version1.4.8
Squirrelmail ≫ Squirrelmail Version1.4.8.4fc6
Squirrelmail ≫ Squirrelmail Version1.4.9
Squirrelmail ≫ Squirrelmail Version1.4.9a
Squirrelmail ≫ Squirrelmail Version1.4.10
Squirrelmail ≫ Squirrelmail Version1.4.10a
Squirrelmail ≫ Squirrelmail Version1.4.11
Squirrelmail ≫ Squirrelmail Version1.4.12
Squirrelmail ≫ Squirrelmail Version1.4.13
Squirrelmail ≫ Squirrelmail Version1.4.15
Squirrelmail ≫ Squirrelmail Version1.4.15 Updaterc1
Squirrelmail ≫ Squirrelmail Version1.4.15rc1
Squirrelmail ≫ Squirrelmail Version1.4.16
Squirrelmail ≫ Squirrelmail Version1.4.17
Squirrelmail ≫ Squirrelmail Version1.4.18
Squirrelmail ≫ Squirrelmail Version1.4.19
Squirrelmail ≫ Squirrelmail Version1.4.20
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.2% 0.429
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.