Vulnerability record · CVE-2009-2964 · published 25 August 2009

CVE-2009-2964: Squirrelmail cross-site request forgery vulnerability

Squirrelmail · Squirrelmail

Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.19 and earlier, and NaSMail before 1.7, allow remote attackers to hijack the authentication of unspecified victims via features such as send message and change preferences, related to (1) functions/mailbox_display.php, (2) src/addrbook_search_html.php, (3) src/addressbook.php, (4) src/compose.php, (5) src/folders.php, (6) src/folders_create.php, (7) src/folders_delete.php, (8) src/folders_rename_do.php, (9) src/folders_rename_getname.php, (10) src/folders_subscribe.php, (11) src/move_messages.php, (12) src/options.php, (13) src/options_highlight.php, (14) src/options_identities.php, (15) src/options_order.php, (16) src/search.php, and (17) src/vcard.php.

6.8 CVSS 2.0 Medium EPSS 1.5% · top 26.5% CWE-352 · Cross-site request forgery

6.8CVSS 2.0 base score

1.5%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

58References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Squirrelmail Squirrelmail

References

Link	Tags
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=543818
http://download.gna.org/nasmail/nasmail-1.7.zip
http://jvn.jp/en/jp/JVN30881447/index.html
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002207.html
http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html
http://osvdb.org/60469
http://secunia.com/advisories/34627	Vendor Advisory
http://secunia.com/advisories/36363	Vendor Advisory
http://secunia.com/advisories/37415
http://secunia.com/advisories/40220
http://secunia.com/advisories/40964
http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog?revision=1	Patch
http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13818	Patch
http://support.apple.com/kb/HT4188
http://www.debian.org/security/2010/dsa-2091
http://www.mandriva.com/security/advisories?name=MDVSA-2009:222
http://www.osvdb.org/57001
http://www.securityfocus.com/bid/36196
http://www.squirrelmail.org/security/issue/2009-08-12	PatchVendor Advisory
http://www.vupen.com/english/advisories/2009/2262	PatchVendor Advisory
http://www.vupen.com/english/advisories/2009/3315
http://www.vupen.com/english/advisories/2010/1481
http://www.vupen.com/english/advisories/2010/2080
https://bugzilla.redhat.com/show_bug.cgi?id=517312	Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/52406
https://gna.org/forum/forum.php?forum_id=2146
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10668
https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00927.html
https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00954.html
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=543818
http://download.gna.org/nasmail/nasmail-1.7.zip
http://jvn.jp/en/jp/JVN30881447/index.html
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002207.html
http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html
http://osvdb.org/60469
http://secunia.com/advisories/34627	Vendor Advisory
http://secunia.com/advisories/36363	Vendor Advisory
http://secunia.com/advisories/37415
http://secunia.com/advisories/40220
http://secunia.com/advisories/40964

Track CVE-2009-2964 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2004-0521Sgi propack vulnerabilitySQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statements, with unknown impact, pro…EPSS 3.2%18 Aug 2004 10.0CVE-2002-0516Squirrelmail vulnerabilitySquirrelMail 1.2.5 and earlier allows authenticated SquirrelMail users to execute arbitrary commands by modifying the THEME variable in a cookie.EPSS 11%12 Aug 2002 9.8CVE-2020-14932Squirrelmail deserialization of untrusted data vulnerabilitycompose.php in SquirrelMail 1.4.22 calls unserialize for the $mailtodata value, which originates from an HTTP GET request. This is related to mailto.…EPSS 1.4%20 Jun 2020 8.8CVE-2020-14933Squirrelmail deserialization of untrusted data vulnerabilitycompose.php in SquirrelMail 1.4.22 calls unserialize for the $attachments value, which originates from an HTTP POST request. NOTE: the vendor dispute…EPSS 1.4%20 Jun 2020 8.8CVE-2018-8741Squirrelmail path traversal vulnerabilityA directory traversal flaw in SquirrelMail 1.4.22 allows an authenticated attacker to exfiltrate (or potentially delete) files from the hosting serve…EPSS 4.2%17 Mar 2018 8.8CVE-2017-7692Squirrelmail improper input validation vulnerabilitySquirrelMail 1.4.22 (and other versions before 20170427_0200-SVN) allows post-authentication remote code execution via a sendmail.cf file that is mis…EPSS 32%20 Apr 2017 7.5CVE-2007-3636Squirrelmail gpg plugin vulnerabilityMultiple unspecified vulnerabilities in the G/PGP (GPG) Plugin 2.1 for Squirrelmail allow remote attackers to execute arbitrary commands via unspecif…EPSS 3.1%10 Jul 2007 7.5CVE-2007-2631Squirrelmail vulnerabilityCross-site request forgery (CSRF) vulnerability in SquirrelMail 1.4.8-4.fc6 and earlier allows remote attackers to perform unspecified actions as arb…EPSS 1.4%13 May 2007

Source: NIST National Vulnerability Database (record CVE-2009-2964), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.