CVE-2006-4429

PHP remote file inclusion vulnerability in handlers/email/mod.output.php in PHlyMail Lite 3.4.4 and earlier (Build 3.04.04) allows remote attackers to execute…

published August 29, 2006

CVSS
—
EPSS
2%
Percentile
75.9
In the wild
Unconfirmed
What it is

PHP remote file inclusion vulnerability in handlers/email/mod.output.php in PHlyMail Lite 3.4.4 and earlier (Build 3.04.04) allows remote attackers to execute arbitrary PHP code via a URL in the _PM_[path][handler] parameter, a different vector than CVE-2006-4291. NOTE: This issue has been disputed by a third party, who states that the _IN_PHM_ declaration prevents this file from being called directly

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01621 · 75.9th percentile
Published
2006-08-29T00:00Z
EPSS history
Timeline
  • 29 AUG 00:00Z
    PHP remote file inclusion vulnerability in handlers/email/mod.output.php in PHlyMail Lite 3.4.4 and earlier (Build 3.04.04) allows remote attackers to execute…
    cvelistv5