2 matches found
CVE-2004-1431
FormMail.php 5.0, and possibly other versions, allows remote attackers to read arbitrary files via a full pathname in the arfile auto-reply parameter...
CVE-2004-1431
CVE-2004-1431 affects FormMail.php 5.0 (and possibly other versions) and allows remote attackers to read arbitrary files by supplying a full pathname in the ar_file parameter (auto-reply). This impacts confidentiality (partial) without affecting integrity or availability per the provided metrics....