46 matches found
CVE-2006-4429
PHP remote file inclusion vulnerability in handlers/email/mod.output.php in PHlyMail Lite 3.4.4 and earlier Build 3.04.04 allows remote attackers to execute arbitrary PHP code via a URL in the PMpathhandler parameter, a different vector than CVE-2006-4291. NOTE: This issue has been disputed by a...
PT-2006-5230 · Phlymail · Phlymail Lite
Name of the Vulnerable Software and Affected Versions: PHlyMail Lite versions 3.4.4 and earlier Description: A remote file inclusion issue allows attackers to execute arbitrary PHP code via a URL in the PM pathhandler parameter. This is a different attack vector. Note that this issue has been...
phlymail.txt
PHlyMail Lite PMpathlib= Remote File Include Vulnerability ------------------------------------------------------------------------------------------------------ - Script name: PHlyMail Lite v. 3.4.4 - Script site: http://phlymail.de...
PHlyMail Lite [PM_[path][lib]=] Remote File Include Vulnerability
PHlyMail Lite PMpathlib= Remote File Include Vulnerability ------------------------------------------------------------------------------------------------------ - Script name: PHlyMail Lite v. 3.4.4 - Script site: http://phlymail.de...
CVE-2006-4291
CVE-2006-4291 describes a PHP remote file inclusion in PHlyMail Lite 3.4.4 and earlier (Build 3.04.04), specifically in handlers/email/mod.listmail.php, allowing an attacker to execute arbitrary PHP code via a URL supplied in the PM [path][handler] parameter. Connected sources corroborate the sam...
CVE-2006-4291
PHP remote file inclusion vulnerability in handlers/email/mod.listmail.php in PHlyMail Lite 3.4.4 and earlier Build 3.04.04 allows remote attackers to execute arbitrary PHP code via a URL in the PMpathhandler parameter...
PHlyMail Lite <= 3.4.4 (folderprops.php) Remote Include Vulnerability (2)
No description provided by source. --------------------------------------------------------------------------- PHlyMail Lite = 3.4.4 Build 3.04.04 PMpathhandler Remote File Include Vulnerability 2 --------------------------------------------------------------------------- Discovered By Kw3RLn...
PHlyMail Lite <= 3.4.4 (folderprops.php) Remote Include Vulnerability (2)
Exploit for unknown platform in category web applications ========================================================================= PHlyMail Lite = 3.4.4 folderprops.php Remote Include Vulnerability 2 =========================================================================...
PHlyMail Lite 3.4.4 - folderprops.php Remote File Inclusion (2)
PHlyMail Lite 3.4.4 - folderprops.php Remote File Inclusion 2 --------------------------------------------------------------------------- PHlyMail Lite = 3.4.4 Build 3.04.04 PMpathhandler Remote File Include Vulnerability 2 -------------------------------------------------------------------------...
[SA21582] PHlyMail Lite "_PM_[path][handler]" File Inclusion Vulnerability
---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...
PHlyMail Lite 3.4.4 - 'folderprops.php' Remote File Inclusion (2)
--------------------------------------------------------------------------- PHlyMail Lite = 3.4.4 Build 3.04.04 PMpathhandler Remote File Include Vulnerability 2 --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team :...
PHlyMail Lite <= 3.4.4 (mod.listmail.php) Remote Include Vulnerability
No description provided by source. / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - PHlyMail Lite = 3.4.4 Build 3.04.04 PMpathhandler Remote File Include Vulnerability + + + - Script name: PHlyMail Lite v. 3.4.4 Build 3.04.04 - Script site: http://phlymail.de/ + + + - Find by: Kacper a.k.a...
PHlyMail Lite 3.4.4 - mod.listmail.php Remote File Inclusion
PHlyMail Lite 3.4.4 - mod.listmail.php Remote File Inclusion / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - PHlyMail Lite handlers/email/mod.listmail.php line 12-25: .... $usepreview = isset$PM'core''foldersusepreview' && $PM'core''foldersusepreview' ? true : false; $ordfields = array...
PHlyMail Lite <= 3.4.4 (mod.listmail.php) Remote Include Vulnerability
Exploit for unknown platform in category web applications ====================================================================== PHlyMail Lite handlers/email/mod.listmail.php line 12-25: .... $usepreview = isset$PM'core''foldersusepreview' && $PM'core''foldersusepreview' ? true : false; $ordfield...
PHlyMail Lite 3.4.4 - 'mod.listmail.php' Remote File Inclusion
/ + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - PHlyMail Lite handlers/email/mod.listmail.php line 12-25: .... $usepreview = isset$PM'core''foldersusepreview' && $PM'core''foldersusepreview' ? true : false; $ordfields = array 'hfrom', 'hto', 'hcc', 'hbcc', 'hsubject', 'hdaterecv',...
CVE-2005-4666
PHlyMail (pre-3.3 Beta1) has an XSS vulnerability allowing remote attackers to inject arbitrary JavaScript via unknown attack vectors. The CVSS v2 base score is 4.3 (Medium) with network access, no authentication, and partial integrity impact. Exploit details are not provided in the documents; no...
CVE-2005-4666
Cross-site scripting XSS vulnerability in PHlyMail before 3.3 Beta1 allows remote attackers to inject arbitrary Javascript via unknown attack vectors...
[SA18536] PHlyMail Unspecified Script Insertion and SQL Injection
TITLE: PHlyMail Unspecified Script Insertion and SQL Injection SECUNIA ADVISORY ID: SA18536 VERIFY ADVISORY: http://secunia.com/advisories/18536/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: PHlyMail Lite 3.x...
CVE-2005-4652
SQL injection vulnerability in PHlyMail 3.02.01 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors...
CVE-2005-4652
PHlyMail 3.02.01 is affected by a SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via unknown attack vectors. The CVE entry does not specify affected versions beyond 3.02.01 in the provided documents, nor does it provide explicit exploit details, root ca...