CVE-2003-0990

The parseAddress code in (1) SquirrelMail 1.4.0 and (2) GPG Plugin 1.1 allows remote attackers to execute commands via shell metacharacters in the "To:" field.

Scoring

CVSS base score
3.26
EPSS probability
81.44%
Published
2004-01-06
Last modified
2026-03-16

Affected products

Markdown version · Browse all CVEs