CVE-2004-0521: security flaw

Severity: Critical

CVSS Score: 10

SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statements, with unknown impact, probably via abook_database.php.