CVE-2002-1132 Information disclosure in n/a

What is CVE-2002-1132?

CVE-2002-1132 is a medium-severity vulnerability in Squirrelmail Squirrelmail, published on 1 Sep 2004. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

SquirrelMail 1.2.7 and earlier allows remote attackers to determine the absolute pathname of the options.php script via a malformed optpage file argument, which generates an error message when the file cannot be included in the script.

Which versions are affected by CVE-2002-1132?

It affects 1 product.

Products include Squirrelmail Squirrelmail.

How do I fix CVE-2002-1132?

Upgrade to a fixed version.

Is CVE-2002-1132 being exploited?

There is no known exploitation of CVE-2002-1132 in the wild and no public exploit code.

Other vulnerabilities in Squirrelmail Squirrelmail

• CVE-2002-0516 Command injection in n/a Critical 10.0
• CVE-2020-14932 Deserialization in n/a Critical 9.8
• CVE-2020-14933 Deserialization in n/a High 8.8
• CVE-2017-7692 Command injection in n/a High 8.8
• CVE-2007-2631 Cross-site request forgery in n/a High 7.5

All Squirrelmail Squirrelmail vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-pq33-gcvg-vm8r.