CVE-2003-0990

High severity, CVSS 7.5. EPSS: 28.8% chance of exploitation in the next 30 days.

The parseAddress code in (1) SquirrelMail 1.4.0 and (2) GPG Plugin 1.1 allows remote attackers to execute commands via shell metacharacters in the "To:" field.

Published 2004-01-20. Last modified 2026-06-16.