CVE-2006-4429

PHP remote file inclusion vulnerability in handlers/email/mod.output.php in PHlyMail Lite 3.4.4 and earlier Build 3.04.04 allows remote attackers to execute arbitrary PHP code via a URL in the PMpathhandler parameter, a different vector than CVE-2006-4291. NOTE: This issue has been disputed by a...

CVE-2006-4429

PHlyMail Lite 3.4.4 and earlier (Build 3.04.04) are vulnerable to PHP remote file inclusion via a URL parameter in PM [path][handler], affecting handlers/email/mod.listmail.php (CVE-2006-4291) and handlers/email/mod.output.php (CVE-2006-4429). The issue enables arbitrary PHP code execution. The v...