CVE-2011-2753

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.21 and earlier allow remote attackers to hijack the authentication of unspecified victims via vectors involving (1) the empty trash implementation and (2) the Index Order (aka options_order) page, a different issue than CVE-2010-4555.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/68586

https://bugzilla.redhat.com/show_bug.cgi?id=720694

http://www.mandriva.com/security/advisories?name=MDVSA-2011:123

http://www.debian.org/security/2011/dsa-2291

http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=revision&revision=14119

http://rhn.redhat.com/errata/RHSA-2012-0103.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3