CVE-2005-4556

PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, when…

published December 28, 2005

CVSS

—

EPSS

11%

Percentile

95.8

In the wild

Unconfirmed

What it is

PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, when register_globals is enabled, allows remote attackers to include arbitrary local and remote PHP files via a URL in the (1) lang_settings and (2) language parameters in (a) accounts/inc/include.php and (b) admin/inc/include.php.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.10566 · 95.8th percentile
Published: 2005-12-28T11:00Z

EPSS history

Timeline

28 DEC 11:00Z
PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, when…
cvelistv5