CVE ID:	CVE-2006-2842
Description:	** DISPUTED ** PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1.4.6 and earlier, if register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the plugins array parameter. NOTE: this issue has been disputed by third parties, who state that Squirrelmail provides prominent warnings to the administrator when register_globals is enabled. Since the varieties of administrator negligence are uncountable, perhaps this type of issue should not be included in CVE. However, the original developer has posted a security advisory, so there might be relevant real-world environments under which this vulnerability is applicable.
Test IDs:	1.3.6.1.4.1.25623.1.0.57058   1.3.6.1.4.1.25623.1.0.59319   1.3.6.1.4.1.25623.1.0.56950   1.3.6.1.4.1.25623.1.0.59338   1.3.6.1.4.1.25623.1.0.62562   1.3.6.1.4.1.25623.1.0.56887   1.3.6.1.4.1.25623.1.0.59454   1.3.6.1.4.1.25623.1.0.59368   1.3.6.1.4.1.25623.1.0.59320
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2006-2842 http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html BugTraq ID: 18231 http://www.securityfocus.com/bid/18231 BugTraq ID: 25159 http://www.securityfocus.com/bid/25159 Bugtraq: 20060601 Squirrelmail local file inclusion (Google Search) http://www.securityfocus.com/archive/1/435605/100/0/threaded http://www.mandriva.com/security/advisories?name=MDKSA-2006:101 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11670 RedHat Security Advisories: RHSA-2006:0547 http://www.redhat.com/support/errata/RHSA-2006-0547.html http://securitytracker.com/id?1016209 http://secunia.com/advisories/20406 http://secunia.com/advisories/20931 http://secunia.com/advisories/21159 http://secunia.com/advisories/21262 http://secunia.com/advisories/26235 SGI Security Advisory: 20060703-01-P ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc SuSE Security Announcement: SUSE-SR:2006:017 (Google Search) http://www.novell.com/linux/security/advisories/2006_17_sr.html http://www.vupen.com/english/advisories/2006/2101 http://www.vupen.com/english/advisories/2007/2732