Security Notice Phishing campain
Version 1.4.15
Security Upgrade
Security
Local file inclusion
Date:
2006年06月01日
Description:
A security issue has been uncovered in functions/plugin.php that could allow a remote user to access local files on the server without requiring login. This issue manifests itself if register_globals is enabled, and magic_quotes_gpc is disabled.
Affected Versions:
<= 1.4.6
Register Globals:
This requires the PHP register_globals setting to be On, a setting both PHP and SquirrelMail highly discourage.