https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:52:35 +0000 https://cve.radiocsirt.org/vuln/certa-2006-avi-229 certa-2006-avi-229 https://cve.radiocsirt.org/vuln/certa-2006-avi-229 https://cve.radiocsirt.org/vuln/euvd-2026-141132 EUVD-2026-141132 https://cve.radiocsirt.org/vuln/euvd-2026-141132 https://cve.radiocsirt.org/vuln/fkie_cve-2006-2842 <p>PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1.4.6 and earlier, if register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the plugins array parameter. NOTE: this issue has been disputed by third parties, who state that Squirrelmail provides prominent warnings to the administrator when register_globals is enabled. Since the varieties of administrator negligence are uncountable, perhaps this type of issue should not be included in CVE. However, the original developer has posted a security advisory, so there might be relevant real-world environments under which this vulnerability is applicable</p> <p>PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1.4.6 and earlier, if register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the plugins array parameter. NOTE: this issue has been disputed by third parties, who state that Squirrelmail provides prominent warnings to the administrator when register_globals is enabled. Since the varieties of administrator negligence are uncountable, perhaps this type of issue should not be included in CVE. However, the original developer has posted a security advisory, so there might be relevant real-world environments under which this vulnerability is applicable</p> https://cve.radiocsirt.org/vuln/fkie_cve-2006-2842 https://cve.radiocsirt.org/vuln/ghsa-h9qp-9p74-vrxm <p>** DISPUTED ** PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1.4.6 and earlier, if register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the plugins array parameter. NOTE: this issue has been disputed by third parties, who state that Squirrelmail provides prominent warnings to the administrator when register_globals is enabled. Since the varieties of administrator negligence are uncountable, perhaps this type of issue should not be included in CVE. However, the original developer has posted a security advisory, so there might be relevant real-world environments under which this vulnerability is applicable.</p> <p>** DISPUTED ** PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1.4.6 and earlier, if register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the plugins array parameter. NOTE: this issue has been disputed by third parties, who state that Squirrelmail provides prominent warnings to the administrator when register_globals is enabled. Since the varieties of administrator negligence are uncountable, perhaps this type of issue should not be included in CVE. However, the original developer has posted a security advisory, so there might be relevant real-world environments under which this vulnerability is applicable.</p> https://cve.radiocsirt.org/vuln/ghsa-h9qp-9p74-vrxm https://cve.radiocsirt.org/vuln/gsd-2006-2842 gsd-2006-2842 https://cve.radiocsirt.org/vuln/gsd-2006-2842 https://cve.radiocsirt.org/vuln/rhsa-2006:0547 <p>security flaw</p> <p>security flaw</p> https://cve.radiocsirt.org/vuln/rhsa-2006:0547