CVE-2009-1580
squirrelmail squirrelmail: no CVSS score yet. EPSS 1.9% chance of exploitation in the next 30 days.
Session fixation vulnerability in SquirrelMail before 1.4.18 allows remote attackers to hijack web sessions via a crafted cookie.
- EPSS
- 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
- CWE
- CWE-287
- Published
- Modified
- Record from
- the NVD, synced
Affected
- squirrelmail:squirrelmail