Total vulnerabilities in the database
SquirrelMail 1.2.7 and earlier allows remote attackers to determine the absolute pathname of the options.php script via a malformed optpage file argument, which generates an error message when the file cannot be included in the script.
| Software | From | Fixed in |
|---|---|---|
| squirrelmail / squirrelmail | - | 1.2.7.x |