CVE-2008-2199

Kmita Mail 3.0 and earlier contains a PHP remote file inclusion vulnerability in kmitaadmin/kmitam/htmlcode.php when register_globals is enabled. The underlying issue is RFI via the file parameter, allowing remote code execution of arbitrary PHP if attackers supply a URL. Affected component: Kmit...