Peaches Posted July 29, 2009 Report Share Posted July 29, 2009 PHP Paid 4 Mail Script "page" File Inclusion VulnerabilityHighly criticalRelease Date: 2009-07-28 A vulnerability has been reported in PHP Paid 4 Mail Script, which can be exploited by malicious people to compromise a vulnerable system.Input passed to the "page" parameter in home.php is not properly verified before being used to include files. This can be exploited to include arbitrary files from local or external resources.secunia advisories - http://secunia.com/advisories/35972/ Quote Link to post Share on other sites
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.