CVE-2002-1648

Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail before 1.2.3 allows remote attackers to send email as other users via an IMG URL…

published March 28, 2005

CVSS
—
EPSS
3%
Percentile
88.8
In the wild
Unconfirmed
What it is

Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail before 1.2.3 allows remote attackers to send email as other users via an IMG URL with modified send_to and subject parameters.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03437 · 88.8th percentile
Published
2005-03-28T05:00Z
EPSS history
Timeline
  • 28 MAR 05:00Z
    Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail before 1.2.3 allows remote attackers to send email as other users via an IMG URL…
    cvelistv5