CVE-2010-4939

2011-10-0910:00:00

mitre

www.cve.org

php; remote file inclusion; mailform 1.2; url parameter

AI Score

7.5

Confidence

High

EPSS

0.005

Percentile

77.7%

JSON

PHP remote file inclusion vulnerability in index.php in MailForm 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the theme parameter.

References

www.exploit-db.com/exploits/14639