$ cve CVE-2005-1924 JSON

CVE-2005-1924 EXPLOIT

9.3

HIGH · CVSS 2.0 · EPSS 10.3% (pctl 96)

Patch early

A public exploit exists.

Description

The G/PGP (GPG) Plugin 2.1 and earlier for Squirrelmail allow remote authenticated users to execute arbitrary commands via shell metacharacters in (1) the fpr parameter to the deleteKey function in gpg_keyring.php, as called by (a) import_key_file.php, (b) import_key_text.php, and (c) keyring_main.php; and (2) the keyserver parameter to the gpg_recv_key function in gpg_key_functions.php, as called by gpg_options.php. NOTE: this issue may overlap CVE-2007-3636.

Scoring

CVSS	9.3 (HIGH, v2.0)
Vector	AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS	10.26% — more likely to be exploited than 96% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2005-12-31
Last modified	2026-06-16

Affected (1)

Vendor	Product
squirrelmail	gpg plugin

Public exploits

Source	Title	Date
exploit-db	SquirrelMail G/PGP Encryption Plugin - 'deletekey()' Command Injection	2007-12-11
exploit-db	SquirrelMail G/PGP Encryption Plugin 2.0 - Command Execution	2007-07-11

References

→ the Explorer · watch your stack · NVD