4 matches found
CVE-2008-3163: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in dodosmail.php in DodosMail 2.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the dodosmailheaderfile parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
CVE-2006-5841
Multiple PHP remote file inclusion vulnerabilities in dodosmail.php in DodosMail 2.0.1 and earlier, and possibly 2.1, allow remote attackers to execute arbitrary PHP code via a URL in the 1 dodosmailheaderfile or 2 dodosmailfooterfile parameters...
CVE-2006-5841
The CVE-2006-5841 issue affects DodosMail versions 2.0.1 and earlier, and possibly 2.1. It describes multiple PHP remote file inclusion vulnerabilities in dodosmail.php, enabling an attacker to execute arbitrary PHP code by supplying a URL in the dodosmail_header_file or dodosmail_footer_file par...
CVE-2006-5841: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in dodosmail.php in DodosMail 2.0.1 and earlier, and possibly 2.1, allow remote attackers to execute arbitrary PHP code via a URL in the 1 dodosmailheaderfile or 2 dodosmailfooterfile parameters...