What’s Vulnerable › Vulnerabilities

CVE-2002-0516

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 11.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2002-08-12 · updated 2026-06-16

Description

SquirrelMail 1.2.5 and earlier allows authenticated SquirrelMail users to execute arbitrary commands by modifying the THEME variable in a cookie.

Affected products

• SquirrelMail: 1.2.0, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5

References

• http://archives.neohapsis.com/archives/bugtraq/2002-03/0350.html
• http://archives.neohapsis.com/archives/bugtraq/2002-03/0386.html
• http://www.iss.net/security_center/static/8671.php
• http://www.securityfocus.com/bid/4385
• http://archives.neohapsis.com/archives/bugtraq/2002-03/0350.html
• http://archives.neohapsis.com/archives/bugtraq/2002-03/0386.html
• http://www.iss.net/security_center/static/8671.php
• http://www.securityfocus.com/bid/4385

Get alerted when CVE-2002-0516 or the next vulnerability affects your stack