Vulnerability Details : CVE-2006-4291
PHP remote file inclusion vulnerability in handlers/email/mod.listmail.php in PHlyMail Lite 3.4.4 and earlier (Build 3.04.04) allows remote attackers to execute arbitrary PHP code via a URL in the _PM_[path][handler] parameter.
Vulnerability category: File inclusion
Exploit prediction scoring system (EPSS) score for CVE-2006-4291
Probability of exploitation activity in the next 30 days: 9.48%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 94 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2006-4291
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|
|
5.1
|
MEDIUM | AV:N/AC:H/Au:N/C:P/I:P/A:P |
4.9
|
6.4
|
nvd@nist.gov |
References for CVE-2006-4291
Products affected by CVE-2006-4291
- cpe:2.3:a:phlymail:phlymail_lite:*:*:*:*:*:*:*:*