http://www.debian.org/security/2017/dsa-3852 [No Types Assigned]

https://security.gentoo.org/glsa/201709-13 [No Types Assigned]

https://www.exploit-db.com/exploits/41910/ [No Types Assigned]

http://www.securitytracker.com/id/1038312 [No Types Assigned]

http://www.securityfocus.com/bid/98067 [No Types Assigned]

SquirrelMail 1.4.22 allows post-authentication remote code execution via a sendmail.cf file that is mishandled in a popen call. It's possible to exploit this vulnerability to execute arbitrary shell commands on the remote server. The problem is in the Deliver_SendMail.class.php with the initStream function that uses escapeshellcmd() to sanitize the sendmail command before executing it. The use of escapeshellcmd() is not correct in this case since it doesn't escape whitespaces, allowing the injec

SquirrelMail 1.4.22 (and other versions before 20170427_0200-SVN) allows post-authentication remote code execution via a sendmail.cf file that is mishandled in a popen call. It's possible to exploit this vulnerability to execute arbitrary shell commands on the remote server. The problem is in the Deliver_SendMail.class.php with the initStream function that uses escapeshellcmd() to sanitize the sendmail command before executing it. The use of escapeshellcmd() is not correct in this case since it 

http://openwall.com/lists/oss-security/2017/04/27/1 [No Types Assigned]

OR
     *cpe:2.3:a:squirrelmail:squirrelmail:1.4.22:*:*:*:*:*:*:*

(AV:N/AC:L/Au:S/C:C/I:C/A:C)

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-20

http://openwall.com/lists/oss-security/2017/04/19/6 No Types Assigned

http://openwall.com/lists/oss-security/2017/04/19/6 Mailing List, Third Party Advisory

https://legalhackers.com/advisories/SquirrelMail-Exploit-Remote-Code-Exec-CVE-2017-7692-Vuln.html No Types Assigned

https://legalhackers.com/advisories/SquirrelMail-Exploit-Remote-Code-Exec-CVE-2017-7692-Vuln.html Exploit, Third Party Advisory

https://legalhackers.com/advisories/SquirrelMail-Exploit-Remote-Code-Exec-CVE-2017-7692-Vuln.html [No Types Assigned]

Squirrelmail 1.4.22 allows post-authentication remote code execution via a sendmail.cf file that is mishandled in a popen call. It's possible to exploit this vulnerability to execute arbitrary shell commands on the remote server. The problem is in the Deliver_SendMail.class.php with the initStream function that uses escapeshellcmd() to sanitize the sendmail command before executing it. The use of escapeshellcmd() is not correct in this case since it doesn't escape whitespaces, allowing the injec

SquirrelMail 1.4.22 allows post-authentication remote code execution via a sendmail.cf file that is mishandled in a popen call. It's possible to exploit this vulnerability to execute arbitrary shell commands on the remote server. The problem is in the Deliver_SendMail.class.php with the initStream function that uses escapeshellcmd() to sanitize the sendmail command before executing it. The use of escapeshellcmd() is not correct in this case since it doesn't escape whitespaces, allowing the injec