CVE:CVE-2006-3665
CNNVD:CNNVD-200607-241
SquirrelMail 1.4.6和更早版本register_globals启用时候,允许远程攻击者在redirect.php利用未知向量劫持COOKIES.
solution:Upgrade squirrelmail squirrelmail to a higher version than 1.4.6,and avoid the version 1.4.6