Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

SquirrelMail Insecure Cookie Disclosure Weakness

SquirrelMail is prone to a cookie-disclosure weakness.

An attacker may leverage this issue to obtain sensitive information, steal cookie-based authentication credentials, and carry out session-hijacking attacks; other attacks are also possible.

SquirrelMail 1.4.15 is vulnerable; other versions may also be affected.







 

Privacy Statement
Copyright 2008, SecurityFocus