Explain CVE-2004-0521
SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statements, with unknown impact, probably via abook_database.php.
Affected Products: n/a
References: [{'name': '12289', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/12289'}, {'name': '10397', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10397'}, {'name': 'oval:org.mitre.oval:def:11446', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11446'}, {'name': '6841', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6841'}, {'name': 'FEDORA-2004-160', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/advisories/6827'}, {'name': '11686', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11686'}, {'name': '11685', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11685'}, {'name': '11870', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11870'}, {'name': '[squirrelmail-cvs] 20040427 [SM-CVS] CVS: squirrelmail/functions abook_database.php,1.15.2.1,1.15.2.2', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=squirrelmail-cvs&m=108309375029888'}, {'name': 'DSA-535', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-535'}, {'name': 'RHSA-2004:240', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2004-240.html'}, {'name': 'squirrelmail-sql-injection(16235)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16235'}, {'name': 'FEDORA-2004-1733', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=1733'}, {'name': 'GLSA-200405-16', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200405-16.xml'}, {'name': '[squirrelmail-devel] 20040511 [SM-DEVEL] SquirrelMail 1.4.3-RC1 Release', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=squirrelmail-cvs&m=108532891231712'}, {'name': 'oval:org.mitre.oval:def:1033', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1033'}, {'name': '20040604-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc'}, {'name': 'CLA-2004:858', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858'}, {'name': 'APPLE-SA-2004-09-07', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://www.securityfocus.com/advisories/7148'}, {'name': 'O-212', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-212.shtml'}]
CVE State: PUBLISHED