$ cve CVE-2002-0516 JSON

CVE-2002-0516 EXPLOIT

10.0

HIGH · CVSS 2.0 · EPSS 11% (pctl 96)

Patch early

A public exploit exists.

SquirrelMail 1.2.5 and earlier allows authenticated SquirrelMail users to execute arbitrary commands by modifying the THEME variable in a cookie.

CVSS	10.0 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS	10.96% — more likely to be exploited than 96% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2002-08-12
Last modified	2026-06-16

Vendor	Product
squirrelmail	squirrelmail

Source	Title	Date
exploit-db	SquirrelMail 1.2.x - Theme Remote Command Execution	2002-03-28