CVE-2006-4291

CVE-2006-4291 describes a PHP remote file inclusion in PHlyMail Lite 3.4.4 and earlier (Build 3.04.04), specifically in handlers/email/mod.listmail.php, allowing an attacker to execute arbitrary PHP code via a URL supplied in the PM [path][handler] parameter. Connected sources corroborate the sam...

PHlyMail Lite 3.4.4 - 'mod.listmail.php' Remote File Inclusion

/ + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - PHlyMail Lite handlers/email/mod.listmail.php line 12-25: .... $usepreview = isset$PM'core''foldersusepreview' && $PM'core''foldersusepreview' ? true : false; $ordfields = array 'hfrom', 'hto', 'hcc', 'hbcc', 'hsubject', 'hdaterecv',...