CVE-2006-4210

nu_mail.inc.php in Andreas Kansok phPay 2.02 and 2.02.1, when register_globals is enabled, allows remote attackers to use the server as an open mail relay via…

published August 17, 2006

CVSS
—
EPSS
2%
Percentile
81.4
In the wild
Unconfirmed
What it is

nu_mail.inc.php in Andreas Kansok phPay 2.02 and 2.02.1, when register_globals is enabled, allows remote attackers to use the server as an open mail relay via modified mail_text2, user_row[5], nu_mail_1, and shop_mail parameters. NOTE: some of these details are obtained from third party information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02088 · 81.4th percentile
Published
2006-08-17T21:00Z
EPSS history
Timeline
  • 17 AUG 21:00Z
    nu_mail.inc.php in Andreas Kansok phPay 2.02 and 2.02.1, when register_globals is enabled, allows remote attackers to use the server as an open mail relay via…
    cvelistv5