← Vulnerability feed

Vulnerability record · CVE-2007-3779 · published 15 July 2007

CVE-2007-3779: Squirrelmail gpg plugin vulnerability

Squirrelmail · Gpg Plugin

PHP local file inclusion vulnerability in gpg_pop_init.php in the G/PGP (GPG) Plugin before 20070707 for Squirrelmail allows remote attackers to include and execute arbitrary local files, related to the MOD parameter.

4.3 CVSS 2.0 Medium EPSS 1.2% · top 33.2%
4.3CVSS 2.0 base score
1.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References
16 Jun 2026Last modified by NVD

Description

PHP local file inclusion vulnerability in gpg_pop_init.php in the G/PGP (GPG) Plugin before 20070707 for Squirrelmail allows remote attackers to include and execute arbitrary local files, related to the MOD parameter.

AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://osvdb.org/37930
http://www.attrition.org/pipermail/vim/2007-July/001703.html Patch
http://www.braverock.com/gpg/cvs/viewcvs.cgi/gpg/gpg_pop_init.php.diff?r1=1.14&r2=1.15
http://www.braverock.com/gpg/statcvs/commit_log.html Patch
http://osvdb.org/37930
http://www.attrition.org/pipermail/vim/2007-July/001703.html Patch
http://www.braverock.com/gpg/cvs/viewcvs.cgi/gpg/gpg_pop_init.php.diff?r1=1.14&r2=1.15
http://www.braverock.com/gpg/statcvs/commit_log.html Patch

Track CVE-2007-3779 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2005-1924Squirrelmail gpg plugin vulnerabilityThe G/PGP (GPG) Plugin 2.1 and earlier for Squirrelmail allow remote authenticated users to execute arbitrary commands via shell metacharacters in (1…EPSS 10%7.5CVE-2007-3778Squirrelmail gpg plugin vulnerabilityThe G/PGP (GPG) Plugin 2.0, and 2.1dev before 20060912, for Squirrelmail allows remote attackers to execute arbitrary commands via shell metacharacte…EPSS 2.7%7.5CVE-2007-3636Squirrelmail gpg plugin vulnerabilityMultiple unspecified vulnerabilities in the G/PGP (GPG) Plugin 2.1 for Squirrelmail allow remote attackers to execute arbitrary commands via unspecif…EPSS 3.1%6.5CVE-2007-3634Squirrelmail gpg plugin vulnerabilityUnspecified vulnerability in the G/PGP (GPG) Plugin 2.0 for Squirrelmail 1.4.10a allows remote authenticated users to execute arbitrary commands via …EPSS 1.6%5.5CVE-2006-4169Squirrelmail gpg plugin vulnerabilityMultiple directory traversal vulnerabilities in the G/PGP (GPG) Plugin 2.0, and 2.1dev before 20070614, for Squirrelmail allow remote authenticated u…EPSS 1.6%4.3CVE-2007-3635Squirrelmail gpg plugin vulnerabilityMultiple unspecified vulnerabilities in the G/PGP (GPG) Plugin before 2.1 for Squirrelmail might allow "local authenticated users" to inject certain …EPSS 0.26%

Source: NIST National Vulnerability Database (record CVE-2007-3779), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.