CVE-2006-4019: Squirrelmail

Medium severity, CVSS 6.4. EPSS: 10% chance of exploitation in the next 30 days.

Dynamic variable evaluation vulnerability in compose.php in SquirrelMail 1.4.0 to 1.4.7 allows remote attackers to overwrite arbitrary program variables and read or write the attachments and preferences of other users.

Affected products

• Squirrelmail Squirrelmail: version 1.4.0 only; version 1.4.1 only; version 1.4.2 only; version 1.4.3 only; version 1.4.3_r3 only; version 1.4.3_rc1 only; …

Published 2006-08-11. Last modified 2026-06-16.