CVE-2006-4291

2006-08-2217:00:00

mitre

www.cve.org

7.5 High

AI Score

Confidence

Low

0.095 Low

EPSS

Percentile

94.8%

JSON

PHP remote file inclusion vulnerability in handlers/email/mod.listmail.php in PHlyMail Lite 3.4.4 and earlier (Build 3.04.04) allows remote attackers to execute arbitrary PHP code via a URL in the PM[path][handler] parameter.

References

secunia.com/advisories/21582

securitytracker.com/id?1016718

www.securityfocus.com/bid/19587

www.vupen.com/english/advisories/2006/3338

exchange.xforce.ibmcloud.com/vulnerabilities/28450

www.exploit-db.com/exploits/2211