Security Advisory

CVE-2006-3665

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2006-07-17 21:00:00

Last updated 2024-08-07 18:39:53

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

SquirrelMail 1.4.6 and earlier, with register_globals enabled, allows remote attackers to hijack cookies in src/redirect.php via unknown vectors. NOTE: while "cookie theft" is frequently associated with XSS, the vendor disclosure is too vague to be certain of this.

← Browse all CVEs View on cve.org ↗