CVE-2005-0513
PHP remote file inclusion vulnerability in mail_autocheck.php in the Email This Entry add-on for pMachine Pro 2.4, and possibly other versions including pMachine Free, allows remote attackers to execute arbitrary PHP code by directly requesting…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (6.33%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
PHP remote file inclusion vulnerability in mail_autocheck.php in the Email This Entry add-on for pMachine Pro 2.4, and possibly other versions including pMachine Free, allows remote attackers to execute arbitrary PHP code by directly requesting mail_autocheck.php and modifying the pm_path parameter to reference a URL on a remote web server that contains the code, a different vulnerability than CVE-2003-1086.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 6.33% probability · 93th percentile
- CISA KEV
- Not listed
- Affected
- pmachine/pmachine pro
- Source
- cve@mitre.org
References
- http://marc.info/?l=full-disclosure&m=110883604531802&w=2
- http://www.securityfocus.com/bid/12597Patch, Vendor Advisory
- http://www.securityfocus.com/bid/15473
- http://marc.info/?l=full-disclosure&m=110883604531802&w=2
- http://www.securityfocus.com/bid/12597Patch, Vendor Advisory
- http://www.securityfocus.com/bid/15473
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.