CVE-2007-3778

The G/PGP (GPG) Plugin 2.0, and 2.1dev before 20060912, for Squirrelmail allows remote attackers to execute arbitrary commands via shell metacharacters in the…

published July 15, 2007

CVSS
—
EPSS
3%
Percentile
85.5
In the wild
Unconfirmed
What it is

The G/PGP (GPG) Plugin 2.0, and 2.1dev before 20060912, for Squirrelmail allows remote attackers to execute arbitrary commands via shell metacharacters in the messageSignedText parameter to the gpg_check_sign_pgp_mime function in gpg_hook_functions.php. NOTE: a parameter value can be set in the contents of an e-mail message.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02667 · 85.5th percentile
Published
2007-07-15T22:00Z
EPSS history
Timeline
  • 15 JUL 22:00Z
    The G/PGP (GPG) Plugin 2.0, and 2.1dev before 20060912, for Squirrelmail allows remote attackers to execute arbitrary commands via shell metacharacters in the…
    cvelistv5