CVE-2006-4291

CVE-2006-4291 describes a PHP remote file inclusion in PHlyMail Lite 3.4.4 and earlier (Build 3.04.04), specifically in handlers/email/mod.listmail.php, allowing an attacker to execute arbitrary PHP code via a URL supplied in the PM [path][handler] parameter. Connected sources corroborate the sam...