CyberSec.Space Logo
Back to CVE Browser

CVE-2004-0521

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1530%
EPSS Percentile38.52th
PublishedAug 18, 2004
Last ModifiedApr 16, 2026

Vulnerability Description

SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statements, with unknown impact, probably via abook_database.php.

Affected Platforms (CPE)

📦
Sgi

Propack

= 3.0
📦
Squirrelmail

Squirrelmail

= 1.0.4
📦
Squirrelmail

Squirrelmail

= 1.0.5
📦
Squirrelmail

Squirrelmail

= 1.2.0
📦
Squirrelmail

Squirrelmail

= 1.2.1
📦
Squirrelmail

Squirrelmail

= 1.2.2
📦
Squirrelmail

Squirrelmail

= 1.2.3
📦
Squirrelmail

Squirrelmail

= 1.2.4
📦
Squirrelmail

Squirrelmail

= 1.2.5
📦
Squirrelmail

Squirrelmail

= 1.2.6
📦
Squirrelmail

Squirrelmail

= 1.2.7
📦
Squirrelmail

Squirrelmail

= 1.2.8
📦
Squirrelmail

Squirrelmail

= 1.2.9
📦
Squirrelmail

Squirrelmail

= 1.2.10
📦
Squirrelmail

Squirrelmail

= 1.2.11
📦
Squirrelmail

Squirrelmail

= 1.4
📦
Squirrelmail

Squirrelmail

= 1.4.1
📦
Squirrelmail

Squirrelmail

= 1.4.2

References & Advisories

🔗 ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc
🔗 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858
🔗 http://marc.info/?l=squirrelmail-cvs&m=108309375029888
🔗 http://marc.info/?l=squirrelmail-cvs&m=108532891231712
🔗 http://rhn.redhat.com/errata/RHSA-2004-240.html
🔗 http://secunia.com/advisories/11685
🔗 http://secunia.com/advisories/11686
🔗 http://secunia.com/advisories/11870

Related Vulnerabilities

CVE-2005-18597.2

Unknown vulnerability in arshell in the Array Service (arrayd) for SGI ProPack 3 with SP 5 and 6, and SGI ProPack 4, allows local ...

CVE-2006-11671.2

SGI ProPack 3 SP6 kernel displays the frame buffer contents of the last session after a reboot, which might allow local users to o...

CVE-2004-058610.0

acpRunner ActiveX 1.2.5.0 allows remote attackers to execute arbitrary code via the (1) DownLoadURL, (2) SaveFilePath, and (3) Dow...

CVE-2004-129910.0

Buffer overflow in the get_attr function in html.c for vilistextum 2.6.6 allows remote attackers to execute arbitrary code via a c...