CVE-2005-0103: PHP remote file inclusion vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers...

Security readout for executives and security teams

SquirrelMail versions before 1.4.4 had a webmail.php flaw that could let a remote attacker make the server run attacker-supplied PHP code. For a public webmail system, that can mean full application compromise. This is old, but any forgotten legacy deployment should be treated seriously. Exposure is most likely in legacy SquirrelMail installations older than 1.4.4, especially internet-facing webmail portals or old vendor-packaged deployments that missed 2005 security updates. Prioritize immediate validation if the organization has legacy webmail. If SquirrelMail is not present, no direct action is indicated beyond confirming asset inventories. Internet-facing affected systems should be remediated urgently. Mitigation focus: Upgrade SquirrelMail to 1.4.4 or later where still supported.; Apply relevant vendor security updates from Red Hat, Gentoo, Apple, or your distributor.; Remove or isolate any obsolete SquirrelMail deployment that cannot be updated..

Prepared

Jun 30, 2026, 01:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.