high7.5Public exploit code
CVE-2010-4939
PHP remote file inclusion vulnerability in index.php in MailForm 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the theme parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MailForm 1.2 - Remote File Inclusion2010-08-13 · webapps · php
Impact
PHP remote file inclusion vulnerability in index.php in MailForm 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the theme parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Scripts.Bdr130 | Mailform | Version 1.2 |