CVE

Id
20533  
CVE No.
CVE-2006-4429  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in handlers/email/mod.output.php in PHlyMail Lite 3.4.4 and earlier (Build 3.04.04) allows remote attackers to execute arbitrary PHP code via a URL in the _PM_[path][handler] parameter, a different vector than CVE-2006-4291. NOTE: This issue has been disputed by a third party, who states that the _IN_PHM_ declaration prevents this file from being called directly.  
Phase
Assigned (20060828)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
192727 20533 CVE-2006-4429 BUGTRAQ:20060818 PHlyMail Lite [PM_[path][lib]=] Remote File Include Vulnerability  View
192728 20533 CVE-2006-4429 URL:http://marc.info/?l=bugtraq&m=115629049105999&w=2  View
192729 20533 CVE-2006-4429 BUGTRAQ:20060826 Re:PHlyMail Lite [PM_[path][lib]=] Remote File Include Vulnerability  View
192730 20533 CVE-2006-4429 URL:http://www.securityfocus.com/archive/1/444215/100/0/threaded  View
192731 20533 CVE-2006-4429 OSVDB:29355  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60811 JVNDB-2006-003077 Zend Platform の Session Clustering Daemon および mod_cluster モジュールにおけるバッファオーバーフローの脆弱性 Zend Platform の (a) Session Clustering Daemon および (b) mod_cluster モジュールには、バッファオーバーフローの脆弱性が存在します。 CVE-2006-4431 20533 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003077.html  View